← 返回 Skills 市场
10919
总下载
27
收藏
104
当前安装
3
版本数
在 OpenClaw 中安装
/install douyin-hot-trend
功能描述
获取抖音热榜/热搜榜数据，包含热门视频、挑战赛、音乐等多领域热门内容，并输出标题、热度值、跳转链接及封面图（如有）。
安全使用建议
Review before installing. The documented command node scripts/douyin.js hot [number] is aligned with fetching public Douyin trends, but avoid scripts/get-hot-trend.js unless the limit is strictly numeric and trusted. Remove or edit cron-job.js unless you explicitly want Telegram-style scheduled output, and replace the hard-coded chat ID with user-controlled configuration.
功能分析
Type: OpenClaw Skill
Name: douyin-hot-trend
Version: 1.1.0
The skill bundle contains a potential shell injection vulnerability in 'scripts/get-hot-trend.js' and 'cron-job.js', where 'execSync' is used to execute shell commands using arguments that are not properly sanitized. While the code's logic aligns with its stated purpose of scraping Douyin hot trends, the use of unsanitized input in system calls is a significant security flaw. Additionally, 'cron-job.js' includes a hardcoded Telegram chat ID (8428610733) for data delivery.
能力评估
Purpose & Capability
SKILL.md and README.md describe fetching public Douyin hot-trend data, while cron-job.js is explicitly framed as a scheduled Telegram delivery job and embeds Telegram-formatted output. That secondary messaging behavior is not disclosed in the user-facing purpose.
Instruction Scope
scripts/get-hot-trend.js accepts a command-line limit and interpolates it into execSync without validation, creating a local command-injection risk if invoked with crafted input. cron-job.js uses the same shell pattern, though its normal limit is constant.
Install Mechanism
package.json declares only a Node runtime requirement, no third-party dependencies, and no install or postinstall scripts.
Credentials
Fetching from Douyin's public web endpoint with browser-like headers and writing local report files is broadly proportionate for a trend-reporting skill, but users should expect network access to Douyin and local text/JSON outputs.
Persistence & Privilege
cron-job.js writes daily-hot-trend-message.txt and daily-hot-trend-output.json and includes a hard-coded Telegram chat_id and channel field. There is no Telegram token or direct API send in the artifact, but the hard-coded destination metadata is under-scoped for a retrieval-only skill.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install douyin-hot-trend - 安装完成后，直接呼叫该 Skill 的名称或使用
/douyin-hot-trend触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.0
v1.1.0 发布：优化热榜数据抓取稳定性，改进错误处理机制，统一版本号管理
v1.0.1
🔄 重新发布：抖音热榜数据获取技能，获取热门视频、挑战赛、音乐等多领域热门内容。
v1.0.0
Initial release: 获取抖音热榜/热搜榜数据，包含热门视频、挑战赛、音乐等多领域热门内容，并输出标题、热度值与跳转链接
元数据
常见问题
Douyin Hot Trend 是什么？
获取抖音热榜/热搜榜数据，包含热门视频、挑战赛、音乐等多领域热门内容，并输出标题、热度值、跳转链接及封面图（如有）。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 10919 次。
如何安装 Douyin Hot Trend？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install douyin-hot-trend」即可一键安装，无需额外配置。
Douyin Hot Trend 是免费的吗？
是的，Douyin Hot Trend 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Douyin Hot Trend 支持哪些平台？
Douyin Hot Trend 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Douyin Hot Trend？
由 xiaofei（@franklu0819-lang）开发并维护，当前版本 v1.1.0。
推荐 Skills