← Back to Skills Marketplace
147
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install qushuiyin
Description
短视频去水印下载。检测到抖音、快手、小红书、B站、微博、西瓜视频等平台链接时，自动解析并下载无水印视频，直接发送文件给用户。
Usage Guidance
Before installing, consider these points:
- This skill will automatically send any detected short-video link to an external API (https://qyapi.ipaybuy.cn) for parsing — if you don't trust that service, do not install it. The service will receive the URLs and potentially other metadata.
- Downloaded videos are stored under /www/wwwroot/default/videos and served via HTTP on port 8899. That rehosts content publicly; check permissions, privacy, copyright, and whether you want files placed in your webroot.
- The bundled script contains hard-coded placeholders for APP_ID/APP_KEY and SERVER_IP. The skill doesn't declare these as required config — you would need to edit the script or otherwise provide credentials/host info. That mismatch is suspicious and could lead to accidental leaks if real keys are later inserted without proper controls.
- Because the skill auto-runs on any message containing matching links, it can exfiltrate links without explicit user confirmation. If you proceed, consider disabling autonomous invocation, sandboxing the skill, or replacing the third-party API with a trusted in-house parser and configuring storage to a safe location.
- If you must use it: review the external API's privacy policy, run the script in a restricted environment, set proper file permissions, and replace placeholders with your own trusted credentials and server only after careful review.
Capability Analysis
Type: OpenClaw Skill
Name: qushuiyin
Version: 1.0.0
The skill exhibits risky behavior by instructing the AI agent to execute a shell command in SKILL.md using user-provided URLs within single quotes, which presents a shell injection vulnerability. Additionally, the download.py script writes files to a sensitive web-root directory (/www/wwwroot/default/videos) and relies on a third-party API (qyapi.ipaybuy.cn) and a hardcoded IP (81.70.156.92) for functionality, which are high-risk patterns even if not explicitly malicious.
Capability Assessment
Purpose & Capability
The name and description match the implementation: the skill accepts short-video links, calls a parsing API, downloads the resulting video, and returns it. However, the implementation expects a web-accessible storage location (/www/wwwroot/default/videos) and an HTTP base URL, which the SKILL metadata does not declare as required configuration or permissions. Rehosting files under the agent's webroot is a capability that should be explicitly disclosed.
Instruction Scope
SKILL.md instructs the agent to auto-trigger on any message containing target-platform links and run the included script. The script sends the provided video URL to an external API (https://qyapi.ipaybuy.cn/api/video) and downloads the returned file. That means user-supplied links (and therefore potentially private or sensitive URLs) are transmitted off-host without any explicit opt-in beyond the skill description. Automatic invocation on any matching message increases the blast radius.
Install Mechanism
There is no install spec (instruction-only plus a small script bundled). Nothing is downloaded at install time and no external binaries are pulled, so install mechanism risk is low.
Credentials
The skill declares no required env vars or credentials, but the bundled script contains hard-coded placeholders for APP_ID, APP_KEY ('密钥'), and SERVER_IP ('服务器ip'). The code expects to use a third-party API and to construct a public BASE_URL for served videos. Required configuration/credentials are not declared, and the external API endpoint is untrusted/unknown — user data (URLs) will be sent there. Writing into a webroot and exposing files publicly is a disproportionate side-effect not reflected in metadata.
Persistence & Privilege
The skill writes downloaded videos into /www/wwwroot/default/videos and exposes them via HTTP on port 8899. While always:false (not force-installed), the skill is allowed to invoke autonomously and is configured to auto-run on matching messages; combined with external uploads and persistent storage this is a notable privilege (data is persisted and publicly exposed).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install qushuiyin - After installation, invoke the skill by name or use
/qushuiyin - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
**Major update: Skill refocused to automatic watermark-free short video downloads for specific platforms.**
- Automatically detects and downloads no-watermark videos from Douyin, Kuaishou, Xiaohongshu, Bilibili, Weibo, and Xigua links in messages.
- Simplified implementation: extracts URL from message and processes via a single script (`scripts/download.py`).
- Relies on third-party API, with no need for cookies or authentication.
- On success, sends video file directly or provides a public download link; on failure, replies with error reason.
- Removed general-purpose, multi-site, and subtitle/transcription functionality.
Metadata
Frequently Asked Questions
What is 短视频去水印下载。检测到抖音、快手、小红书、B站、微博、西瓜视频等平台链接时，自动解析并下载无水印视频，直接发送文件给用户。?
短视频去水印下载。检测到抖音、快手、小红书、B站、微博、西瓜视频等平台链接时，自动解析并下载无水印视频，直接发送文件给用户。 It is an AI Agent Skill for Claude Code / OpenClaw, with 147 downloads so far.
How do I install 短视频去水印下载。检测到抖音、快手、小红书、B站、微博、西瓜视频等平台链接时，自动解析并下载无水印视频，直接发送文件给用户。?
Run "/install qushuiyin" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is 短视频去水印下载。检测到抖音、快手、小红书、B站、微博、西瓜视频等平台链接时，自动解析并下载无水印视频，直接发送文件给用户。 free?
Yes, 短视频去水印下载。检测到抖音、快手、小红书、B站、微博、西瓜视频等平台链接时，自动解析并下载无水印视频，直接发送文件给用户。 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does 短视频去水印下载。检测到抖音、快手、小红书、B站、微博、西瓜视频等平台链接时，自动解析并下载无水印视频，直接发送文件给用户。 support?
短视频去水印下载。检测到抖音、快手、小红书、B站、微博、西瓜视频等平台链接时，自动解析并下载无水印视频，直接发送文件给用户。 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created 短视频去水印下载。检测到抖音、快手、小红书、B站、微博、西瓜视频等平台链接时，自动解析并下载无水印视频，直接发送文件给用户。?
It is built and maintained by douzi (@sjzai); the current version is v1.0.0.
More Skills