douyin-analytics

Warn

Audited by Socket on Apr 7, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS:用途与“抖音数据抓取”大体相关,但实现方式依赖用户提供原始网页登录 Cookie,并将其明文写入临时文件后转交给未验证的本地脚本联网使用。PyPI requests 安装本身较常规,但核心风险来自不成比例的凭证索取、凭证明文落盘,以及偏离官方开放平台授权的数据流。

Confidence: 91%Severity: 84%
Audit Metadata
Analyzed At
Apr 7, 2026, 03:21 AM
Package URL
pkg:socket/skills-sh/hwj123hwj%2Fsanwan-skills%2Fdouyin-analytics%2F@e39cba397785936e38f22910d67fa21da2f1d047