← 返回 Skills 市场
mar-douyin-hot-trend
作者
MarjorieBroad
· GitHub ↗
· v1.0.0
· MIT-0
66
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install mar-douyin-hot-trend
功能描述
获取抖音热榜/热搜榜数据，包含热门视频、挑战赛、音乐等多领域热门内容，并输出标题、热度值、跳转链接及封面图（如有）。
安全使用建议
This skill appears to do what it claims: it uses your SKILLBOSS_API_KEY to call the SkillBoss scraping endpoint and formats Douyin hot-trend data. Before installing, confirm you trust the SkillBoss API provider (api.heybossai.com) because your API key will be sent there. Note the cron-job includes a hard-coded Telegram chat_id but no Telegram token—if you want automatic sending, you'll need to add a Telegram bot token and review how and where tokens are stored. Also be mindful of scraping rate limits and local file writes (the scripts save JSON/text outputs in the skill folder). If you are cautious: (1) keep SKILLBOSS_API_KEY scoped and rotate it if needed, (2) review/change the hard-coded chat_id or remove sending code, and (3) run the scripts in an isolated environment first to verify behavior.
功能分析
Type: OpenClaw Skill
Name: mar-douyin-hot-trend
Version: 1.0.0
The skill bundle contains a command injection vulnerability in 'scripts/get-hot-trend.js', where the 'limit' argument from 'process.argv[2]' is passed directly into 'execSync' without sanitization. Additionally, 'cron-job.js' contains a hardcoded Telegram chat ID (8428610733) for data delivery, which is unusual for a generic skill. While the primary logic of scraping Douyin trends via the SkillBoss API (api.heybossai.com) aligns with the stated purpose, these implementation flaws pose a security risk.
能力标签
能力评估
Purpose & Capability
Name/description match the implemented behavior: scripts call the SkillBoss API (api.heybossai.com) to scrape Douyin hot lists, parse the returned JSON/markdown, and output formatted trend items. The only required env var is SKILLBOSS_API_KEY, which is appropriate for calling that API.
Instruction Scope
Runtime instructions and scripts focus on fetching and formatting Douyin hot-trend data and saving outputs to local files and stdout. A minor note: cron-job.js prepares a Telegram-formatted message and includes a hard-coded chat_id ('8428610733') and 'channel: telegram' in the JSON output but does not include or use a Telegram bot token—so it does not actually send messages. This is not malicious but may be unexpected and could require user review if you plan to integrate actual sending.
Install Mechanism
No external install/download spec — code is instruction-only with included Node scripts and a package.json that declares 'node' as required. No network downloads or archived extracts are performed by the skill itself.
Credentials
Only SKILLBOSS_API_KEY is required and used; that is proportional because the scripts POST to the SkillBoss API. There are no other secret environment variables or unrelated credential requests.
Persistence & Privilege
Skill does not request always:true and does not modify other skills or system-wide settings. It writes output files into its own directory (debug/logging) which is expected for this kind of utility.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mar-douyin-hot-trend - 安装完成后，直接呼叫该 Skill 的名称或使用
/mar-douyin-hot-trend触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
douyin-hot-trend v1.1.0 introduces enhanced output and new fields:
- 新增封面图（cover）字段，支持显示热点封面图片链接
- 优化输出格式，展示更清晰
- 改进错误处理机制，提高稳定性
- 保持原有功能，继续支持获取抖音热榜数据
元数据
常见问题
mar-douyin-hot-trend 是什么？
获取抖音热榜/热搜榜数据，包含热门视频、挑战赛、音乐等多领域热门内容，并输出标题、热度值、跳转链接及封面图（如有）。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 66 次。
如何安装 mar-douyin-hot-trend？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mar-douyin-hot-trend」即可一键安装，无需额外配置。
mar-douyin-hot-trend 是免费的吗？
是的，mar-douyin-hot-trend 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
mar-douyin-hot-trend 支持哪些平台？
mar-douyin-hot-trend 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 mar-douyin-hot-trend？
由 MarjorieBroad（@marjoriebroad）开发并维护，当前版本 v1.0.0。
推荐 Skills