Skills/ClawHub/douyin-upload-mcp-skill

douyin-upload-mcp-skill@0.1.8

CAUTION· static only

Publisher claims: "抖音自动投放与登录守卫。用于抖音创作者平台自动发布视频/图文、检测登录失效、生成二维码、处理短信/机器人/安全验证、同步数据生成分析、根据数据生成下一条视频方案、自动回复评论/私信、数字人形象定制/训练、一键成片、截图并通过飞书提醒客户。遇到抖音发布、投放、二维码登录、客户扫码、登录过期、发布前检查、字段化短视频..." Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher mrchenyh · publishing for 172 daysInstalls 889Last detonated 17 min ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-14 and scored it 51/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Access to sensitive file paths; Access to sensitive file paths; Privileged sudo command. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH
Access to sensitive file pathsscripts/bootstrap-openclaw.js:377 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesjoin(vendorXiaoiceToolDir, '.env.example'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/bootstrap-openclaw.js:369 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'Install Chrome/Edge/Chromium manually, or set BROWSER_PATH in .env.local.',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Privileged sudo commandscripts/bootstrap-openclaw.js:327 · Privileged sudo command — agent may execute with elevated privilegesecho "sudo is required to install a browser automatically. Run sudo -v first, or install Chrome/Edge/Chromium manually." >&2Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsscripts/export-skill-package.js:137 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'./.env.local',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/digital-human-training.js:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst XIAOICE_ENV_PATH = process.env.XIAOICE_VIDEO_ENV_PATH || join(HOME, '自动营销', 'xiaoice-video-tool', '.env');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/digital-human-training.js:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst SKILL_ENV_PATH = new URL('../.env', import.meta.url).pathname;Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/background-job.js:134 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv: { ...process.env, ...env },Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/bootstrap-openclaw.js:37 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst xiaoiceEnvPath = resolveHomePath(process.env.XIAOICE_VIDEO_ENV_PATH || join(xiaoiceToolDir, '.env'));Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/export-skill-package.js:136 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'./.env',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/digital-human-training.js:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst SKILL_LOCAL_ENV_PATH = new URL('../.env.local', import.meta.url).pathname;Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Privileged sudo commandscripts/bootstrap-openclaw.js:324 · Privileged sudo command — agent may execute with elevated privilegeselif command -v sudo >/dev/null 2>&1 && sudo -n true >/dev/null 2>&1; thenFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsscripts/export-skill-package.js:98 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst envLocalPath = join(tempRoot, '.env.local');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/bootstrap-openclaw.js:145 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenvKeys: Object.keys(server?.env || {}).sort(),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:102 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…w/skills`。 4. 安装后运行 `npm install`/`npm ci`、`cp references/skill-local-config.md .env.local 2>/dev/null || cp .env.example .env.local`、`node scripts/bootstrap-opencl…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/bootstrap-openclaw.js:401 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesjoin(xiaoiceToolDir, '.env.example'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:97 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…查：`已收到截图请求，我会先截当前页面再处理。` 统一迁移顺序： 0. 从源机器导出迁移包。默认安全包：`npm run export:skill`，不含 `.env/.env.local`。受信任私有机器需要带密钥时：`node scripts/export-skill-package.js /path/to/out --…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/export-skill-package.js:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesDefault excludes .env/.env.local. Use --include-env only for trusted private transfer.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/scripts/dev-up.js:62 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileshints: ['Set VIDEO_CALLBACK_PUBLIC_BASE_URL in .env, or set VIDEO_USE_NGROK=true'],Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/config.js:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// ── 手动加载 .env 文件（不依赖 dotenv） ──Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/persona-flow.js:63 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesloadEnvFileIntoProcess(join(ROOT, '.env.local'));Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/scripts/dev-callback-sync.js:139 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'Verify VIDEO_SERVICE_ADMIN_TOKEN in .env',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/persona-flow.js:64 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesloadEnvFileIntoProcess(join(ROOT, '.env.development'));Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/xiaoice-video-produce.js:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst XIAOICE_ENV_PATH = process.env.XIAOICE_VIDEO_ENV_PATH || join(XIAOICE_TOOL_DIR, '.env');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/adapters/openclaw-plugin/skills/xiaoice-video/SKILL.md:93 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- If the user asks to rotate the XiaoIce API key, ask for the new provider key or point them to the service `.env` / runtime config, not the plugin config.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/scripts/dev-callback-sync.js:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files`Run npm run dev:ngrok first, or set VIDEO_CALLBACK_PUBLIC_BASE_URL in .env when VIDEO_USE_NGROK=false`,Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/adapters/openclaw-plugin/skills/xiaoice-video/SKILL.md:102 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- admin token source: `VIDEO_SERVICE_ADMIN_TOKEN` in `/home/yirongbest/xiaoice-video-tool/.env`Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/config.js:9 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files* 2. .env.local（本机真实测试/密钥配置，git-ignored）Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/preflight.js:196 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst xiaoiceEnvPath = resolveHomePath(process.env.XIAOICE_VIDEO_ENV_PATH || join(xiaoiceToolDir, '.env'));Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/adapters/openclaw-plugin/skills/xiaoice-video/SKILL.md:99 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- service env file: `/home/yirongbest/xiaoice-video-tool/.env`Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/scripts/dev-up.js:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileshints: ['Set VIDEO_SERVICE_ADMIN_TOKEN in .env'],Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/adapters/openclaw-plugin/skills/xiaoice-video/SKILL.md:118 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- persistent update (survives service restart): edit `/home/yirongbest/xiaoice-video-tool/.env`Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/scripts/dev-ngrok.js:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'Check NGROK_API_URL and VIDEO_TASK_SERVICE_PORT in .env',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/install-openclaw-skill.js:159 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'If Feishu credentials or receive chat id are missing, fill .env.local or OpenClaw Feishu account config.',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/config.js:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files* 4. .env（基础配置，可提交到 git）Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/scripts/dev-ngrok.js:116 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files`Verify NGROK_BIN in .env (current: ${context.ngrok.bin})`,Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/marketing-controller.js:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst XIAOICE_ENV_PATH = process.env.XIAOICE_VIDEO_ENV_PATH || join(process.env.HOME || '.', '自动营销', 'xiaoice-video-tool', '.env');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/config.js:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files* 3. .env.development（开发环境，git-ignored）Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/scripts/dev-service.js:87 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'Verify .env tokens and provider settings',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/scripts/dev-utils.js:102 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesfunction loadDotEnv({ envPath = path.join(REPO_ROOT, '.env') } = {}) {Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/preflight.js:224 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'Fill XiaoIce video provider keys and service tokens in the XiaoIce .env file.',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/config.js:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files* 解析 .env 文件内容为 key-value 对象Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/persona-flow.js:65 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesloadEnvFileIntoProcess(join(ROOT, '.env'));Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/preflight.js:208 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'Create XiaoIce .env from references/xiaoice-service-config.md or vendor/xiaoice-video-tool/.env.example and fill provider keys.',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/template-first-run.sh:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesexport XIAOICE_VIDEO_ENV_PATH="${XIAOICE_VIDEO_ENV_PATH:-${XIAOICE_DIR}/.env}"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/scripts/dev-up.js:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileshints: ['Set VIDEO_SERVICE_CALLBACK_TOKEN in .env'],Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/sync-douyin-data-to-feishu-bitable.js:474 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files? '飞书应用缺少多维表权限。请打开 authUrl 授权 bitable:app 或 base:app:create；如果使用已有多维表，还需把 FEISHU_BITABLE_APP_TOKEN 配到 .env。'Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/scripts/dev-callback-sync.js:39 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'Set VIDEO_SERVICE_ADMIN_TOKEN in .env',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File type combined with upload actionscripts/prepare-upstream-publish-task.js:13 · File type combined with upload action — agent may exfiltrate local data filesnode scripts/prepare-upstream-publish-task.js --input upstream.json [--output templates/publish-task.from-upstream.json] [--cache-dir /path]Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Tunneling service URLvendor/xiaoice-video-tool/tests/dev-bootstrap.test.js:56 · Tunneling service URL — may route traffic to attacker infrastructureconst callbackPublicBaseUrl = 'https://demo.ngrok.app';Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
File type combined with upload actionsrc/douyin-ops.js:2175 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`[ops] 验证码填入结果: value="${inputState.value}", verifyEnabled=${inputState.verifyEnabled}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionscripts/douyin-comment-reply.js:1847 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(JSON.stringify({ ok: false, error: 'send_button_disabled', target: first, prepare, targetPrepare, opened, fill }, null, 2));Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionscripts/douyin-dm-reply.js:705 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(JSON.stringify({ ok: false, error: 'dm_send_button_disabled', fill }, null, 2));Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Tunneling service URLvendor/xiaoice-video-tool/tests/dev-bootstrap.test.js:40 · Tunneling service URL — may route traffic to attacker infrastructurepublic_url: 'https://correct-port.ngrok.app',Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/scripts/dev-utils.js:594 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files`Verify NGROK_API_URL in .env (current: ${context.ngrok.apiUrl})`,Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Tunneling service URLvendor/xiaoice-video-tool/tests/dev-bootstrap.test.js:30 · Tunneling service URL — may route traffic to attacker infrastructurepublic_url: 'https://wrong-port.ngrok.app',Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Process kill commandscripts/bootstrap-openclaw.js:199 · Process kill command — agent can terminate processesconst kill = killBrowserPortProcesses();Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
File type combined with upload actionscripts/help.js:43 · File type combined with upload action — agent may exfiltrate local data filesnode scripts/prepare-upstream-publish-task.js --input upstream.json --output publish-task.jsonFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/douyin-ops.js:1263 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`[ops] 文件已通过隐藏 input 直接塞入 (${paths.length} 个)，等待处理...`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/browser.js:207 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`[browser] 从 Daemon 获取到 wsEndpoint，正在建立 CDP 直连...`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/scripts/dev-utils.js:480 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'Set VIDEO_CALLBACK_PUBLIC_BASE_URL in .env, or run npm run dev:ngrok first',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Tunneling service URLvendor/xiaoice-video-tool/tests/fixtures/ngrok-tunnels.multi.json:13 · Tunneling service URL — may route traffic to attacker infrastructure"public_url": "http://target-http-only.ngrok-free.app",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/scripts/dev-utils.js:651 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files`Set ${name} in .env`,Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Tunneling service URLvendor/xiaoice-video-tool/tests/dev-bootstrap.test.js:49 · Tunneling service URL — may route traffic to attacker infrastructureassert.equal(selected.publicUrl, 'https://correct-port.ngrok.app');Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
File type combined with upload actionscripts/digital-human-training.js:1251 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(JSON.stringify(output, null, 2));Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Tunneling service URLvendor/xiaoice-video-tool/tests/ngrok-bootstrap.contract.test.js:117 · Tunneling service URL — may route traffic to attacker infrastructureassert.equal(selectedUrl, 'https://exact-first.ngrok-free.app');Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Tunneling service URLvendor/xiaoice-video-tool/tests/fixtures/ngrok-tunnels.single.json:5 · Tunneling service URL — may route traffic to attacker infrastructure"public_url": "https://current-public.ngrok-free.app",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
File type combined with upload actionscripts/douyin-schedule-manager.js:1188 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(JSON.stringify(output, null, 2));Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Tunneling service URLvendor/xiaoice-video-tool/tests/fixtures/ngrok-tunnels.multi.json:21 · Tunneling service URL — may route traffic to attacker infrastructure"public_url": "https://exact-first.ngrok-free.app",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Tunneling service URLvendor/xiaoice-video-tool/tests/fixtures/ngrok-tunnels.multi.json:29 · Tunneling service URL — may route traffic to attacker infrastructure"public_url": "https://exact-second.ngrok-free.app",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
File type combined with upload actionscripts/persona-flow.js:1039 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(JSON.stringify(output, null, 2));Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Access to sensitive file pathsvendor/xiaoice-video-tool/scripts/dev-utils.js:470 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'Verify VIDEO_SERVICE_INTERNAL_TOKEN / VIDEO_SERVICE_ADMIN_TOKEN / VIDEO_SERVICE_CALLBACK_TOKEN in .env',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Tunneling service URLvendor/xiaoice-video-tool/tests/ngrok-bootstrap.contract.test.js:132 · Tunneling service URL — may route traffic to attacker infrastructurebody: { data: { callbackPublicBaseUrl: 'https://exact-first.ngrok-free.app' } },Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Process kill commandsrc/browser.js:104 · Process kill command — agent can terminate processesspawnSync('bash', ['-lc', "pgrep -f 'src/daemon/server.js' | xargs -r kill -KILL"], {Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Tunneling service URLvendor/xiaoice-video-tool/tests/fixtures/ngrok-tunnels.multi.json:5 · Tunneling service URL — may route traffic to attacker infrastructure"public_url": "https://wrong-port.ngrok-free.app",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Access to sensitive file pathsvendor/xiaoice-video-tool/tests/helpers/ngrok-bootstrap.js:178 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv: { ...process.env, ...env },Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Process kill commandsrc/browser.js:51 · Process kill command — agent can terminate processesspawnSync('bash', ['-lc', "pgrep -f 'src/daemon/server.js' | xargs -r kill -TERM"], {Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Tunneling service URLvendor/xiaoice-video-tool/tests/dev-bootstrap.test.js:35 · Tunneling service URL — may route traffic to attacker infrastructurepublic_url: 'http://correct-port-http.ngrok.app',Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
File type combined with upload actionscripts/marketing-controller.js:1763 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(JSON.stringify(output, null, 2));Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionscripts/douyin-schedule-manager.js:1198 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(JSON.stringify(output, null, 2));Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/douyin-ops.js:2107 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`[ops] 获取验证码点击结果: ${JSON.stringify(sendCodeResult)}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Tunneling service URLvendor/xiaoice-video-tool/tests/ngrok-bootstrap.contract.test.js:165 · Tunneling service URL — may route traffic to attacker infrastructurecallbackPublicBaseUrl: 'https://exact-first.ngrok-free.app',Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Tunneling service URLvendor/xiaoice-video-tool/tests/ngrok-bootstrap.contract.test.js:160 · Tunneling service URL — may route traffic to attacker infrastructurecallbackPublicBaseUrl: 'https://exact-first.ngrok-free.app',Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Tunneling service URLvendor/xiaoice-video-tool/tests/ngrok-bootstrap.contract.test.js:172 · Tunneling service URL — may route traffic to attacker infrastructurecallbackPublicBaseUrl: 'https://exact-first.ngrok-free.app',Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07

Cost to the agent

Instructions loaded
≈6,632 tok
2 files · 140 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

29 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim mrchenyh: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  3. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  4. File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
  5. Tunneling service URL≈ +2 on the totalReplace encoded or assembled strings with plain literals and remove undeclared network calls.
  6. Process kill command≈ +2 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim mrchenyhPropose a patch to the maintainer