douyin-cli
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
SecuritySecuritydouyin_sign.py
MEDIUMSecurityMEDIUM
douyin_sign.py
The code appears intended to automate Douyin browsing, login, searching, and data retrieval. It does not provide clear evidence of malware or covert exfiltration. However, it exposes authenticated cookies in plaintext, uses unsafe shell command construction, and has potential injection paths through the screenshot path and interpolated JavaScript values. The supplied fragment is also syntactically incomplete or invalid, so runtime assessment is limited.
Confidence: 95%Severity: 70%
Audit Metadata