← 返回 Skills 市场
80
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install gnview-api-downloader
功能描述
抖音数据API工具集，包含用户数据获取、Cookie更新等完整API接口。适用于抖音数据采集的场景。
使用说明 (SKILL.md)
gnview-api-downloader
功能概述
本技能为抖音数据API工具集，提供完整的抖音数据采集与分析能力，核心功能包括：
- 单个/批量抖音视频数据获取
- 抖音用户信息与作品列表采集
- Cookie更新与会话维护
Quick Reference
| 模块 | 参考文件 | 简介 |
|---|---|---|
| 单个视频数据 | references/GET_douyin_web_fetch_one_video.md |
获取抖音单个作品的详细数据 |
| 用户作品列表 | references/GET_douyin_web_fetch_user_post_videos.md |
获取抖音用户主页的所有作品数据 |
| 用户sec_user_id | references/GET_douyin_web_get_sec_user_id.md |
从抖音用户主页链接提取sec_user_id |
| 用户信息 | references/GET_douyin_web_handler_user_profile.md |
获取抖音指定用户的详细信息 |
| Cookie管理 | references/POST_hybrid_update_cookie.md |
更新指定服务的Cookie值，维护会话状态 |
按需读取
references/下的模块文档获取详细 API 用法和代码示例。
配置说明
所有配置项均统一存放在技能目录下的config.json文件中，需在使用前完成配置：
| 配置项路径 | 类型 | 示例值 | 说明 |
|---|---|---|---|
base_url |
字符串 | http://xxx/ | API服务基础地址 |
示例config.json：
{
"base_url": "http://xxx/",
}
安全使用建议
This skill will send Douyin/TikTok profile URLs and full browser cookie strings (session tokens like ttwid, odin_tt, passport_csrf_token) to an external API gateway (the examples point to sd79uu743j76vf3vkn7pg.apigateway-cn-beijing.volceapi.com). The package metadata does not identify the service owner or a homepage. Before installing: (1) do not paste live account cookies unless you trust the operator and have reviewed their privacy/security policy; (2) prefer using read‑only data or anonymized tokens instead of full cookies; (3) if you must use it, change cookies/passwords after testing and run the skill in an isolated environment; (4) verify or override config.json.base_url to a trusted host or self-host the backend if possible; (5) be cautious about automated agents executing the documented curl commands because they will transmit secrets to the remote host. If you can contact the author or see an official homepage and privacy statement, that could raise confidence; absent that, treat it as risky.
功能分析
Type: OpenClaw Skill
Name: gnview-api-downloader
Version: 1.0.0
The skill bundle provides a Douyin data collection toolset that interfaces with a third-party API gateway on Volcengine. It includes a high-risk capability in `references/POST_hybrid_update_cookie.md` that allows the agent to send session cookies to a remote server, which is a significant security risk even if intended for session maintenance. Furthermore, multiple reference files (e.g., `references/GET_douyin_web_fetch_one_video.md`) contain hardcoded API endpoints (http://sd79uu743j76vf3vkn7pg.apigateway-cn-beijing.volceapi.com) in examples, which may cause an AI agent to bypass the `base_url` configuration in `config.json` and exfiltrate session data to a specific remote host.
能力评估
Purpose & Capability
The skill claims to be a Douyin data API toolkit and the included reference docs describe endpoints for fetching videos, user info and updating cookies—this aligns with the stated purpose. However, the SKILL.md points to a concrete external API gateway domain (sd79uu743j76vf3vkn7pg.apigateway-cn-beijing.volceapi.com) while config.json suggests a configurable base_url; the package metadata and homepage do not disclose the external service operator. That discrepancy (hidden backend) is notable.
Instruction Scope
Runtime instructions explicitly tell users/agents to extract full browser Cookie strings (ttwid, odin_tt, passport_csrf_token) and POST them to the remote API to 'update_cookie' and maintain sessions. They also show curl/jq shell examples that send user URLs and cookie values to the external gateway. These steps involve reading and transmitting sensitive credentials and session tokens outside the local environment, which goes beyond benign bookkeeping and should be treated as potential credential exfiltration.
Install Mechanism
This is an instruction-only skill with no installers or code files to execute; nothing is written to disk by an install step. That lowers the risk of arbitrary code execution. (However, runtime instructions do assume availability of tools like curl and jq, which are not declared as required binaries—minor inconsistency.)
Credentials
The skill does not request environment variables or credentials via metadata, but it explicitly instructs the user/agent to supply and transmit highly sensitive cookies and session tokens. Because the metadata doesn't declare or warn about this requirement and the remote endpoint owner is not documented, the scope of required secrets is disproportionate and opaque.
Persistence & Privilege
The skill does not request always:true or any persistent elevated privileges, and it does not modify other skills or system-wide configuration. Autonomous invocation is allowed (platform default) but not by itself a red flag here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install gnview-api-downloader - 安装完成后，直接呼叫该 Skill 的名称或使用
/gnview-api-downloader触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
gnview-api-downloader v1.0.0
- 初始发布，提供完整的抖音数据API工具集
- 支持获取单个及批量抖音视频数据
- 实现抖音用户信息和作品列表采集
- 包含Cookie更新与会话维护功能
- 提供详细模块参考文档与统一配置说明
元数据
常见问题
gnview-api-downloader 是什么？
抖音数据API工具集，包含用户数据获取、Cookie更新等完整API接口。适用于抖音数据采集的场景。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 80 次。
如何安装 gnview-api-downloader？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install gnview-api-downloader」即可一键安装，无需额外配置。
gnview-api-downloader 是免费的吗？
是的，gnview-api-downloader 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
gnview-api-downloader 支持哪些平台？
gnview-api-downloader 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 gnview-api-downloader？
由 gnview（@gnview）开发并维护，当前版本 v1.0.0。
推荐 Skills