← Back to Skills Marketplace
10919
Downloads
27
Stars
104
Active Installs
3
Versions
Install in OpenClaw
/install douyin-hot-trend
Description
获取抖音热榜/热搜榜数据，包含热门视频、挑战赛、音乐等多领域热门内容，并输出标题、热度值、跳转链接及封面图（如有）。
Usage Guidance
Review before installing. The documented command node scripts/douyin.js hot [number] is aligned with fetching public Douyin trends, but avoid scripts/get-hot-trend.js unless the limit is strictly numeric and trusted. Remove or edit cron-job.js unless you explicitly want Telegram-style scheduled output, and replace the hard-coded chat ID with user-controlled configuration.
Capability Analysis
Type: OpenClaw Skill
Name: douyin-hot-trend
Version: 1.1.0
The skill bundle contains a potential shell injection vulnerability in 'scripts/get-hot-trend.js' and 'cron-job.js', where 'execSync' is used to execute shell commands using arguments that are not properly sanitized. While the code's logic aligns with its stated purpose of scraping Douyin hot trends, the use of unsanitized input in system calls is a significant security flaw. Additionally, 'cron-job.js' includes a hardcoded Telegram chat ID (8428610733) for data delivery.
Capability Assessment
Purpose & Capability
SKILL.md and README.md describe fetching public Douyin hot-trend data, while cron-job.js is explicitly framed as a scheduled Telegram delivery job and embeds Telegram-formatted output. That secondary messaging behavior is not disclosed in the user-facing purpose.
Instruction Scope
scripts/get-hot-trend.js accepts a command-line limit and interpolates it into execSync without validation, creating a local command-injection risk if invoked with crafted input. cron-job.js uses the same shell pattern, though its normal limit is constant.
Install Mechanism
package.json declares only a Node runtime requirement, no third-party dependencies, and no install or postinstall scripts.
Credentials
Fetching from Douyin's public web endpoint with browser-like headers and writing local report files is broadly proportionate for a trend-reporting skill, but users should expect network access to Douyin and local text/JSON outputs.
Persistence & Privilege
cron-job.js writes daily-hot-trend-message.txt and daily-hot-trend-output.json and includes a hard-coded Telegram chat_id and channel field. There is no Telegram token or direct API send in the artifact, but the hard-coded destination metadata is under-scoped for a retrieval-only skill.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install douyin-hot-trend - After installation, invoke the skill by name or use
/douyin-hot-trend - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
v1.1.0 发布：优化热榜数据抓取稳定性，改进错误处理机制，统一版本号管理
v1.0.1
🔄 重新发布：抖音热榜数据获取技能，获取热门视频、挑战赛、音乐等多领域热门内容。
v1.0.0
Initial release: 获取抖音热榜/热搜榜数据，包含热门视频、挑战赛、音乐等多领域热门内容，并输出标题、热度值与跳转链接
Metadata
Frequently Asked Questions
What is Douyin Hot Trend?
获取抖音热榜/热搜榜数据，包含热门视频、挑战赛、音乐等多领域热门内容，并输出标题、热度值、跳转链接及封面图（如有）。 It is an AI Agent Skill for Claude Code / OpenClaw, with 10919 downloads so far.
How do I install Douyin Hot Trend?
Run "/install douyin-hot-trend" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Douyin Hot Trend free?
Yes, Douyin Hot Trend is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Douyin Hot Trend support?
Douyin Hot Trend is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Douyin Hot Trend?
It is built and maintained by xiaofei (@franklu0819-lang); the current version is v1.1.0.
More Skills