douyin-hotlist-overall-v1@1.4.0
CAUTIONPublisher claims: "抖音全网实时热点总榜、抖音各垂类热搜榜。支持四大能力： (1) 关键词搜索视频/图文，可按点赞数、发布时间、时长、内容类型筛选排序； (2) 实时热榜查询，获取抖音热搜词条与热度数据； (3) 博主作品抓取，按主页链接或 sec_uid 获取公开作品列表； (4) 视频评论分析，按视频链接或 aweme_id 获取评论内容与互动数据。 Use when: 用户需要搜抖音视频、查抖音热榜/热搜、抓取博主作品列表、分析视频评论区、做短视频选题/竞品分析/舆情监控/热点追踪/爆款挖掘/抖音运营数据分析。 Do NOT use when: 平台非抖音（小红书/B站/微博→对应技能）、需登录态或私密数据" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry ClawHubPublisher why20261 · joined 2 days agoInstalls 304Last detonated 19 h ago
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
CRITICAL
Access to sensitive file pathssrc/douyin/post-cli.js:122 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05MEDIUM
File type combined with upload actionSKILL.md:259 · File type combined with upload action — agent may exfiltrate local data files
AST07CRITICAL
Access to sensitive file pathssrc/douyin/search-cli.js:168 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathssrc/douyin/hot-cli.js:42 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathssrc/douyin/comment-cli.js:113 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathsreferences/changelog.md:85 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05MEDIUM
File type combined with upload actionreadme.md:154 · File type combined with upload action — agent may exfiltrate local data files
AST07MEDIUM
File type combined with upload actionreadme.md:152 · File type combined with upload action — agent may exfiltrate local data files
AST07