← Back to Skills Marketplace
80
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install gnview-api-downloader
Description
抖音数据API工具集，包含用户数据获取、Cookie更新等完整API接口。适用于抖音数据采集的场景。
README (SKILL.md)
gnview-api-downloader
功能概述
本技能为抖音数据API工具集，提供完整的抖音数据采集与分析能力，核心功能包括：
- 单个/批量抖音视频数据获取
- 抖音用户信息与作品列表采集
- Cookie更新与会话维护
Quick Reference
| 模块 | 参考文件 | 简介 |
|---|---|---|
| 单个视频数据 | references/GET_douyin_web_fetch_one_video.md |
获取抖音单个作品的详细数据 |
| 用户作品列表 | references/GET_douyin_web_fetch_user_post_videos.md |
获取抖音用户主页的所有作品数据 |
| 用户sec_user_id | references/GET_douyin_web_get_sec_user_id.md |
从抖音用户主页链接提取sec_user_id |
| 用户信息 | references/GET_douyin_web_handler_user_profile.md |
获取抖音指定用户的详细信息 |
| Cookie管理 | references/POST_hybrid_update_cookie.md |
更新指定服务的Cookie值，维护会话状态 |
按需读取
references/下的模块文档获取详细 API 用法和代码示例。
配置说明
所有配置项均统一存放在技能目录下的config.json文件中，需在使用前完成配置：
| 配置项路径 | 类型 | 示例值 | 说明 |
|---|---|---|---|
base_url |
字符串 | http://xxx/ | API服务基础地址 |
示例config.json：
{
"base_url": "http://xxx/",
}
Usage Guidance
This skill will send Douyin/TikTok profile URLs and full browser cookie strings (session tokens like ttwid, odin_tt, passport_csrf_token) to an external API gateway (the examples point to sd79uu743j76vf3vkn7pg.apigateway-cn-beijing.volceapi.com). The package metadata does not identify the service owner or a homepage. Before installing: (1) do not paste live account cookies unless you trust the operator and have reviewed their privacy/security policy; (2) prefer using read‑only data or anonymized tokens instead of full cookies; (3) if you must use it, change cookies/passwords after testing and run the skill in an isolated environment; (4) verify or override config.json.base_url to a trusted host or self-host the backend if possible; (5) be cautious about automated agents executing the documented curl commands because they will transmit secrets to the remote host. If you can contact the author or see an official homepage and privacy statement, that could raise confidence; absent that, treat it as risky.
Capability Analysis
Type: OpenClaw Skill
Name: gnview-api-downloader
Version: 1.0.0
The skill bundle provides a Douyin data collection toolset that interfaces with a third-party API gateway on Volcengine. It includes a high-risk capability in `references/POST_hybrid_update_cookie.md` that allows the agent to send session cookies to a remote server, which is a significant security risk even if intended for session maintenance. Furthermore, multiple reference files (e.g., `references/GET_douyin_web_fetch_one_video.md`) contain hardcoded API endpoints (http://sd79uu743j76vf3vkn7pg.apigateway-cn-beijing.volceapi.com) in examples, which may cause an AI agent to bypass the `base_url` configuration in `config.json` and exfiltrate session data to a specific remote host.
Capability Assessment
Purpose & Capability
The skill claims to be a Douyin data API toolkit and the included reference docs describe endpoints for fetching videos, user info and updating cookies—this aligns with the stated purpose. However, the SKILL.md points to a concrete external API gateway domain (sd79uu743j76vf3vkn7pg.apigateway-cn-beijing.volceapi.com) while config.json suggests a configurable base_url; the package metadata and homepage do not disclose the external service operator. That discrepancy (hidden backend) is notable.
Instruction Scope
Runtime instructions explicitly tell users/agents to extract full browser Cookie strings (ttwid, odin_tt, passport_csrf_token) and POST them to the remote API to 'update_cookie' and maintain sessions. They also show curl/jq shell examples that send user URLs and cookie values to the external gateway. These steps involve reading and transmitting sensitive credentials and session tokens outside the local environment, which goes beyond benign bookkeeping and should be treated as potential credential exfiltration.
Install Mechanism
This is an instruction-only skill with no installers or code files to execute; nothing is written to disk by an install step. That lowers the risk of arbitrary code execution. (However, runtime instructions do assume availability of tools like curl and jq, which are not declared as required binaries—minor inconsistency.)
Credentials
The skill does not request environment variables or credentials via metadata, but it explicitly instructs the user/agent to supply and transmit highly sensitive cookies and session tokens. Because the metadata doesn't declare or warn about this requirement and the remote endpoint owner is not documented, the scope of required secrets is disproportionate and opaque.
Persistence & Privilege
The skill does not request always:true or any persistent elevated privileges, and it does not modify other skills or system-wide configuration. Autonomous invocation is allowed (platform default) but not by itself a red flag here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install gnview-api-downloader - After installation, invoke the skill by name or use
/gnview-api-downloader - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
gnview-api-downloader v1.0.0
- 初始发布，提供完整的抖音数据API工具集
- 支持获取单个及批量抖音视频数据
- 实现抖音用户信息和作品列表采集
- 包含Cookie更新与会话维护功能
- 提供详细模块参考文档与统一配置说明
Metadata
Frequently Asked Questions
What is gnview-api-downloader?
抖音数据API工具集，包含用户数据获取、Cookie更新等完整API接口。适用于抖音数据采集的场景。 It is an AI Agent Skill for Claude Code / OpenClaw, with 80 downloads so far.
How do I install gnview-api-downloader?
Run "/install gnview-api-downloader" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is gnview-api-downloader free?
Yes, gnview-api-downloader is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does gnview-api-downloader support?
gnview-api-downloader is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created gnview-api-downloader?
It is built and maintained by gnview (@gnview); the current version is v1.0.0.
More Skills