← Back to Skills Marketplace
marjoriebroad

mar-douyin-hot-trend

by MarjorieBroad · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
66
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install mar-douyin-hot-trend
Description
获取抖音热榜/热搜榜数据,包含热门视频、挑战赛、音乐等多领域热门内容,并输出标题、热度值、跳转链接及封面图(如有)。
Usage Guidance
This skill appears to do what it claims: it uses your SKILLBOSS_API_KEY to call the SkillBoss scraping endpoint and formats Douyin hot-trend data. Before installing, confirm you trust the SkillBoss API provider (api.heybossai.com) because your API key will be sent there. Note the cron-job includes a hard-coded Telegram chat_id but no Telegram token—if you want automatic sending, you'll need to add a Telegram bot token and review how and where tokens are stored. Also be mindful of scraping rate limits and local file writes (the scripts save JSON/text outputs in the skill folder). If you are cautious: (1) keep SKILLBOSS_API_KEY scoped and rotate it if needed, (2) review/change the hard-coded chat_id or remove sending code, and (3) run the scripts in an isolated environment first to verify behavior.
Capability Analysis
Type: OpenClaw Skill Name: mar-douyin-hot-trend Version: 1.0.0 The skill bundle contains a command injection vulnerability in 'scripts/get-hot-trend.js', where the 'limit' argument from 'process.argv[2]' is passed directly into 'execSync' without sanitization. Additionally, 'cron-job.js' contains a hardcoded Telegram chat ID (8428610733) for data delivery, which is unusual for a generic skill. While the primary logic of scraping Douyin trends via the SkillBoss API (api.heybossai.com) aligns with the stated purpose, these implementation flaws pose a security risk.
Capability Tags
requires-sensitive-credentials
Capability Assessment
Purpose & Capability
Name/description match the implemented behavior: scripts call the SkillBoss API (api.heybossai.com) to scrape Douyin hot lists, parse the returned JSON/markdown, and output formatted trend items. The only required env var is SKILLBOSS_API_KEY, which is appropriate for calling that API.
Instruction Scope
Runtime instructions and scripts focus on fetching and formatting Douyin hot-trend data and saving outputs to local files and stdout. A minor note: cron-job.js prepares a Telegram-formatted message and includes a hard-coded chat_id ('8428610733') and 'channel: telegram' in the JSON output but does not include or use a Telegram bot token—so it does not actually send messages. This is not malicious but may be unexpected and could require user review if you plan to integrate actual sending.
Install Mechanism
No external install/download spec — code is instruction-only with included Node scripts and a package.json that declares 'node' as required. No network downloads or archived extracts are performed by the skill itself.
Credentials
Only SKILLBOSS_API_KEY is required and used; that is proportional because the scripts POST to the SkillBoss API. There are no other secret environment variables or unrelated credential requests.
Persistence & Privilege
Skill does not request always:true and does not modify other skills or system-wide settings. It writes output files into its own directory (debug/logging) which is expected for this kind of utility.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install mar-douyin-hot-trend
  3. After installation, invoke the skill by name or use /mar-douyin-hot-trend
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
douyin-hot-trend v1.1.0 introduces enhanced output and new fields: - 新增封面图(cover)字段,支持显示热点封面图片链接 - 优化输出格式,展示更清晰 - 改进错误处理机制,提高稳定性 - 保持原有功能,继续支持获取抖音热榜数据
Metadata
Slug mar-douyin-hot-trend
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is mar-douyin-hot-trend?

获取抖音热榜/热搜榜数据,包含热门视频、挑战赛、音乐等多领域热门内容,并输出标题、热度值、跳转链接及封面图(如有)。 It is an AI Agent Skill for Claude Code / OpenClaw, with 66 downloads so far.

How do I install mar-douyin-hot-trend?

Run "/install mar-douyin-hot-trend" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is mar-douyin-hot-trend free?

Yes, mar-douyin-hot-trend is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does mar-douyin-hot-trend support?

mar-douyin-hot-trend is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created mar-douyin-hot-trend?

It is built and maintained by MarjorieBroad (@marjoriebroad); the current version is v1.0.0.

💬 Comments