Douyin Video Fetch

下载抖音视频到本地（无水印优先）。用于给后续视频分析/复刻提供原始素材，支持 URL 或 video_id 输入、批量列表输入与统一输出目录。

Install only if you are comfortable with a Python downloader that launches a headless browser, contacts Douyin/video-hosting endpoints, reads any batch file path you provide, and writes MP4 files to the selected output directory. Use it only for videos you are authorized to download, choose a dedicated output folder, and avoid pointing --file at sensitive local files.

Type: OpenClaw Skill Name: douyin-video-fetch Version: 1.0.0 The `scripts/fetch_video.py` skill is classified as suspicious due to vulnerabilities in its input handling. Specifically, the `--file` argument allows reading from an arbitrary file path, which could be exploited for arbitrary file read (e.g., `/etc/passwd`). Additionally, the `--output-dir` argument, if controlled by an attacker, could potentially lead to path traversal, allowing files to be written outside the intended skill directory. While the skill's stated purpose of downloading Douyin videos is legitimate and the `SKILL.md` instructions are benign, these file system access vulnerabilities pose a risk if the agent is instructed to provide malicious arguments.