Skills/ClawHub/douyin-scraper-terry

douyin-scraper-terry@1.2.0

VERIFIED· install only

Publisher claims: "爬取抖音爆款视频和文案数据，支持自然语言搜索请求（如"搜索一下海鲜视频"）、关键词搜索、热榜获取、视频信息提取等。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher terrycarter1985 · publishing for 187 daysInstalls 965Last detonated 17 h ago
$clawhub install douyin-scraper-terry
WatchReport an issue

Coverage

Install scripts ran; no agent task scenario for this bundle.
Tested
install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; install scripts ran; no agent task scenario for this bundle) on 2026-11-13 and scored it 88/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessinstall script run in the sandbox
0.2sprocessexec /usr/bin/dirname
0.2sprocessexited 1:
0.2sprocessscript backend runs setup only
0.2sprocessscript backend runs setup only
0.2sprocesssecond launch, clock +45 days, CI unset
0.3sprocessexec /usr/bin/dirname
0.3sprocessexited 1: ./install.sh: line 40: venv/bin/activate: No such file or directory

Static findings

MEDIUM
File type combined with upload actionSKILL.md:30 · File type combined with upload action — agent may exfiltrate local data files5. **输出可选** — "保存到xxx.json" → 提取 `--output xxx.json`，默认不保存文件Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packageSKILL.md:72 · npx invocation of non-well-known package — may execute untrusted codenpx playwright install chromiumFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File permission modification commandinstall.sh:60 · File permission modification command — agent changes file ownership/permissionschmod +x scripts/douyin_scraper.jsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandinstall.sh:59 · File permission modification command — agent changes file ownership/permissionschmod +x scripts/scraper.pyFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandinstall.sh:80 · File permission modification command — agent changes file ownership/permissionschmod +x run.shFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Python subprocess execution detectedinstall_playwright_docker.py:14 · Python subprocess execution detectedsubprocess.run(cmd, cwd=cwd, env=env, check=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05

Cost to the agent

Instructions loaded
≈740 tok
1 file · 10 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.