← 返回 Skills 市场

Bulk Tiktok Downloader

Name: Bulk Tiktok Downloader
Author: mes28io

作者 mes · GitHub ↗ · v0.1.0

cross-platform ⚠ suspicious

887

总下载

当前安装

版本数

在 OpenClaw 中安装

/install bulk-tiktok-downloader-skill

功能描述

Bulk download TikTok videos from a text file of URLs using yt-dlp. Use when a user asks to download many TikTok videos at once, process a URL list file, or s...

使用说明 (SKILL.md)

bulk TikTok downloader

Use this skill to run a local bulk TikTok downloader safely and reproducibly.

Safety + legality

Download only content you are authorized to download.
Respect platform Terms of Service, local copyright rules, and user privacy.
Do not bypass paywalls or private/protected content.

Inputs

URL list file (one URL per line)
Optional output directory

Lines starting with # are comments and ignored.

Setup

From workspace root:

python3 -m pip install --user -r skills/bulk-tiktok-downloader/scripts/requirements.txt

Run

Default (uses urls.txt next to script and downloads/ output):

python3 skills/bulk-tiktok-downloader/scripts/downloader.py

Custom URL file:

python3 skills/bulk-tiktok-downloader/scripts/downloader.py my_urls.txt

Custom URL file + output directory:

python3 skills/bulk-tiktok-downloader/scripts/downloader.py my_urls.txt my_downloads

Recommended workflow

Validate URL list file exists and is non-empty.
Run downloader.
Report successful vs failed counts.
Surface failed URLs and likely reason (private/deleted/region restricted/rate limit).

Troubleshooting

No module named yt_dlp → install requirements.
File not found → verify URL file path.
Frequent failures/rate limit → reduce batch size and retry later.

Upstream reference

See:

skills/bulk-tiktok-downloader/references/upstream-readme.md

安全使用建议

This skill appears to do exactly what it says: run a local Python script that uses yt-dlp to download TikTok videos listed in a text file. Before installing/running: (1) review the urls.txt input to avoid downloading unwanted content; (2) run pip install in a virtualenv or with --user to limit system exposure; (3) do not run as root; (4) be mindful of copyright and TikTok terms of service; (5) inspect the included downloader.py yourself (it's short and readable) and only use trusted versions of yt-dlp from PyPI. If you need stronger isolation, run the script inside a container or VM to confine network and disk access.

功能分析

Type: OpenClaw Skill Name: bulk-tiktok-downloader-skill Version: 0.1.0 The skill is classified as suspicious due to a lack of input sanitization for command-line arguments in `scripts/downloader.py`. Specifically, the `urls_file` argument is used directly in `open(urls_file, 'r')`, creating an arbitrary file read vulnerability. The `output_folder` argument is used directly in `Path(output_folder).mkdir` and within the `yt-dlp` `outtmpl` string, which could lead to path traversal and arbitrary file write vulnerabilities if an attacker provides malicious input. While these are significant vulnerabilities, there is no clear evidence of intentional malicious behavior like data exfiltration or backdoor installation.

能力评估

✓ Purpose & Capability

Name/description match the included script and docs. The skill only requires yt-dlp (declared in requirements.txt) and reads a user-supplied URL list to download videos — nothing extraneous is requested.

✓ Instruction Scope

SKILL.md instructs a local pip install and running the included Python script; the runtime instructions only reference the URLs file and an output folder. The script reads a local file, creates an output directory, and calls yt_dlp; it does not access other system files, env vars, or external endpoints beyond yt-dlp's normal network calls.

ℹ Install Mechanism

No install spec in registry; the SKILL.md instructs installing dependencies via pip from requirements.txt (yt-dlp from PyPI). This is a common, expected approach but carries the usual caution for installing packages from PyPI — moderate risk compared to no install. No unusual download URLs or archive extraction are used.

✓ Credentials

The skill requires no environment variables, credentials, or config paths. The absence of secrets or unrelated credentials is proportionate to a downloader utility.

✓ Persistence & Privilege

always is false and the skill does not request any persistent system-wide changes or modify other skills. It runs as an on-demand script and stores downloads only in the specified output folder.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install bulk-tiktok-downloader-skill
安装完成后，直接呼叫该 Skill 的名称或使用 /bulk-tiktok-downloader-skill 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.0

bulk-tiktok-downloader-skill 0.1.0 - Initial release: bulk download TikTok videos from a text file of URLs using yt-dlp. - Supports optional output directory and ignores comment lines in URL list. - Includes usage instructions, troubleshooting tips, and legal guidance. - Validates input file and reports successes and failures.

元数据

Slug bulk-tiktok-downloader-skill

版本 0.1.0

许可证 —

累计安装 4

当前安装数 3

历史版本数 1

常见问题