The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill requires users to provide highly sensitive platform session cookies for multiple advanced analytical functions.
Evidence: In references/api-creator.md, endpoints like fetch_author_diagnosis, fetch_item_analysis_item_performance, and fetch_item_analysis_overview require the user's session cookie in the POST body.
Evidence: In references/api-user.md, the fetch_user_collects endpoint also requires a web version session cookie.
Context: These credentials grant full access to the user's Douyin account and are transmitted to the third-party service at https://www.aconfig.cn.
[CREDENTIALS_UNSAFE]: The skill's registration function accepts proxy credentials in a format that exposes passwords.
Evidence: In references/api-video.md, the register_device endpoint accepts a proxy parameter in the format username:password@ip:port.
Context: This results in the collection and transmission of plaintext proxy login credentials to an external server.
[COMMAND_EXECUTION]: The skill relies on curl to perform network operations that transmit harvested session data and proxy credentials.
Evidence: SKILL.md demonstrates the use of curl with the MAXHUB_API_KEY to interact with the external API, serving as the conduit for data exfiltration of user-provided tokens.

maxhub-douyin