Automatically fetch Douyin videos from short, standard, or share links by extracting video ID and downloading via simulated iPhone browser.

This skill appears coherent and does what it says: load Douyin pages in a headless Chromium browser and download videos to /tmp. Before installing or running: (1) ensure you install Playwright and its browser binaries from the official source so you know what is being downloaded; (2) run the scripts in an isolated environment (container or VM) if you are concerned about network activity or handling untrusted links; (3) be aware of copyright/ToS implications for downloading content; (4) review or run the included code locally — it does not exfiltrate secrets or require credentials, but it will fetch remote content and save files to disk.

Type: OpenClaw Skill Name: lgcapture Version: 1.0.0 The skill bundle contains a script, `download.py`, which has a path traversal vulnerability. This script accepts an optional `output_file` argument from `sys.argv[2]` and uses it directly in `open(output_file, 'wb')` without any sanitization. Although the `SKILL.md` instructions guide the agent to use `douyin.py` (which is benign and writes only to `/tmp/`), the presence of `download.py` in the bundle means an attacker could potentially use prompt injection to instruct the agent to execute `download.py` with a malicious `output_file` path (e.g., `../../../../etc/passwd`), leading to arbitrary file write. This is a vulnerability that could be exploited, making the skill suspicious.