douyin-realtime-searchs@1.4.0
CAUTIONPublisher claims: "抖音作品实时搜索工具。根据用户输入的关键词实时搜索抖音最新作品，支持按排序方式、发布时间和视频时长筛选，返回实时数据（非缓存/历史数据）。当用户明确要求「实时」「最新」「现在」「当前」搜索抖音内容，搜索抖音爆款视频，查询抖音作品数据，查找抖音热门内容，或对已有数据时效性存疑时使用。触发词：抖音实时搜索、抖音最新作品、实时抖音热门、当前抖音数据、抖音实时、抖音爆款、抖音热门、抖音作品查询、抖音搜索、爆款视频、热门视频查询。支持四大能力：(1) 关键词搜索视频/图文，可按点赞数、发布时间、视频时长、内容类型筛选排序；(2) 实时热榜查询，获取抖音热搜词条与热度数据；(3) 博主作品抓取，按主页链接" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry ClawHubPublisher why20261 · joined 2 days agoInstalls 269Last detonated 41 h ago
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
CRITICAL
Access to sensitive file pathssrc/douyin/comment-cli.js:113 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05MEDIUM
File type combined with upload actionreadme.md:154 · File type combined with upload action — agent may exfiltrate local data files
AST07CRITICAL
Access to sensitive file pathssrc/douyin/hot-cli.js:42 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05MEDIUM
File type combined with upload actionSKILL.md:247 · File type combined with upload action — agent may exfiltrate local data files
AST07MEDIUM
File type combined with upload actionreadme.md:152 · File type combined with upload action — agent may exfiltrate local data files
AST07CRITICAL
Access to sensitive file pathsreferences/changelog.md:85 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathssrc/douyin/search-cli.js:168 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathssrc/douyin/post-cli.js:122 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05