douyin-kol-search

SUSPICIOUS. The skill’s purpose and data flow are mostly coherent for a hosted Douyin KOL search service, but it relies on a third-party backend and a partially unspecified CLI install chain that performs transitive skill installation. No clear malware behavior is shown, yet the off-host credential forwarding and incomplete installer provenance raise medium security concern.