douyin-cli

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
douyin_sign.py

The code appears intended to automate Douyin browsing, login, searching, and data retrieval. It does not provide clear evidence of malware or covert exfiltration. However, it exposes authenticated cookies in plaintext, uses unsafe shell command construction, and has potential injection paths through the screenshot path and interpolated JavaScript values. The supplied fragment is also syntactically incomplete or invalid, so runtime assessment is limited.

Confidence: 95%Severity: 70%
Audit Metadata
Analyzed At
Sep 14, 2026, 04:58 PM
Package URL
pkg:socket/skills-sh/0xranx%2Fagent-kit%2Fdouyin-cli%2F@93c1a01690fca4a53e458028dc1f6bf4f35243272205aceb0fa653d56ce6bd2d