auto-douyin

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

该技能与其声明用途基本一致:用 Playwright 自动登录并发布抖音视频,数据流也指向官方 Douyin 域名,未见明显凭证外传或第三方中继。主要风险在于账号 Cookie 本地持久化、可无头/定时执行公开发布,以及未锁版本的 Playwright 供应链风险;整体更像高风险自动化工作流,而非恶意技能。

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 06:25 AM
Package URL
pkg:socket/skills-sh/zrt-ai-lab%2Fopencode-skills%2Fauto-douyin%2F@ead13c9cb47b14d4f3a1951d039a65553f3e74c853f5b8a88fd4be5b9d2dc5de
Security Audit — socket — auto-douyin