Skills/ClawHub/douyin-kol-crawler

douyin-kol-crawler@1.4.0

CAUTION

Publisher claims: "抖音作品爬取工具，输入抖音URL或抖音ID，输出抖音账号基础信息和近期作品内容列表（最多10000条）。当用户提到"爬取抖音作品"、"抓取抖音KOL作品"、"抓取抖音博主作品"、"抖音作品列表"、"查看抖音视频"、"抖音内容采集"、"抓取抖音作品"时使用。支持四大能力：(1) 关键词搜索视频/图文，可按点赞数、发布时间、时长、内容类型筛选排序；(2) 实时热榜查询，获取抖音热搜词条与热度数据；(3) 博主作品抓取，按主页链接或 sec_uid 获取公开作品列表；(4) 视频评论分析，按视频链接或 aweme_id 获取评论内容与互动数据。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher why20261 · joined 2 days agoInstalls 289Last detonated 19 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsreferences/changelog.md:85 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actionreadme.md:154 · File type combined with upload action — agent may exfiltrate local data files
AST07
CRITICAL
Access to sensitive file pathssrc/douyin/post-cli.js:122 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actionreadme.md:152 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionSKILL.md:251 · File type combined with upload action — agent may exfiltrate local data files
AST07
CRITICAL
Access to sensitive file pathssrc/douyin/search-cli.js:168 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/douyin/hot-cli.js:42 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/douyin/comment-cli.js:113 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05