by 安全扫描
OpenClaw
安全
high confidenceThe skill's code, instructions, and requirements align: it’s a simple Node script that calls Douyin's public endpoint, processes results, and saves them to the workspace; it does not request credentials or perform unrelated actions.
评估建议
This skill appears coherent and straightforward: it needs Node.js and network access, calls Douyin's public endpoint, formats results, and writes douyin-hot-clean.json into your workspace. Before installing: (1) confirm you trust the skill source and are comfortable allowing network access; (2) ensure writing to the workspace/scripts path is acceptable (it will create that directory if missing); (3) be aware the endpoint may change or require login for some items—errors will cause the script to ...详细分析 ▾
✓ 用途与能力
Name/description promise (抓取抖音热搜 Top 50) matches the implementation: the JS file issues an HTTPS GET to douyin.com/aweme/v1/web/hot/search/list/, formats and sorts results, and outputs a Top 50 list.
✓ 指令范围
SKILL.md describes direct API calls, formatting, and saving output to workspace/scripts/douyin-hot-clean.json; douyin-hot.js performs exactly those actions and does not read unrelated files, credentials, or external endpoints.
✓ 安装机制
No install spec; instruction-only plus a small Node.js script. The only runtime requirement is Node.js 18+ (declared). There are no downloads, package installs, or archive extraction.
✓ 凭证需求
The skill requests no secrets or credentials. It optionally reads WORKSPACE to locate the output directory (reasonable for controlling where results are written). No other environment variables or config paths are accessed.
✓ 持久化与权限
always is false and the skill does not alter other skills or system-wide settings. It writes output to a workspace/scripts JSON file (expected behavior for a scraper).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/26
- Initial release: 自动抓取并返回抖音热搜榜 Top 50，包含热度值及结构化输出。 - 采用抖音官方API端点，响应速度快，无需浏览器依赖。 - 数据清洗、排序与格式化，支持保存到本地 JSON 文件。 - 支持常用关键词触发（如“抖音热搜”、“douyin hot”）。 - 错误自动重试与提示，提升稳定性。
● 无害
安装命令
点击复制官方npx clawhub@latest install tiktok-hot-cn
镜像加速npx clawhub@latest install tiktok-hot-cn --registry https://cn.longxiaskill.com镜像同步中
技能文档
自动抓取抖音热搜榜 Top 50，包含热度值。
触发方式
抖音热搜
获取抖音热榜
douyin hot
能力
- 直接API调用：使用抖音官方API端点
/aweme/v1/web/hot/search/list/ - 高性能：不依赖浏览器，响应快速（约3秒）
- 清洗、排序、格式化热度值
- 返回结构化列表（排名、标题、热度、原始热度值、标签、描述）
输出格式
[
{
"rank": 1,
"title": "金价一周大跌11%",
"heat": "1208.2万",
"heat_value": 12108917
}
]
控制台输出示例：
📊 抖音热搜榜（Top 50）
========================================
1. 金价一周大跌11% 🔥 1208.2万
2. 随手一拍都是春日大片 🔥 1189.5万
...
配置
依赖：Node.js 18+（无额外依赖，使用内置https模块）
性能优化
- v2.0版本：使用直接API调用，替代Puppeteer浏览器模拟
- 速度提升：从20-30秒降至3-5秒
- 稳定性提升：避免浏览器兼容性和网络问题
- 资源消耗：无需下载Chromium（节省100MB+）
错误处理
- 网络超时：自动重试，增加等待时间
- API 变更：提示更新选择器
- 无数据：检查网络或使用 Cookie
数据存储
抓取结果保存到：workspace/scripts/douyin-hot-clean.json
示例对话
用户: 抖音热搜
助手: 📊 抖音热搜榜（Top 50）:
1. 金价一周大跌11% 🔥 1208.2万
2. 随手一拍都是春日大片 🔥 1189.5万
...
✅ 已保存到 douyin-hot-clean.json
限制
- 需要网络访问
- API端点可能变更（但抖音官方API相对稳定）
- 某些需要登录的热搜可能无法获取
维护
更新脚本位置：skills/douyin-hot/douyin-hot.js