douyin-batch-download

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/login.py

The fragment appears to be a user-directed Douyin login and cookie-export utility rather than malware. It contains no evident exfiltration, persistence beyond the explicitly requested browser profile, reverse shell, cryptomining, or arbitrary code execution. It does handle highly sensitive authentication cookies insecurely by printing and storing them in plaintext, and it weakens Chromium security with --no-sandbox and --disable-web-security. Use only in a trusted environment, protect the output file and profile directory, and avoid exposing console output.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Sep 25, 2026, 04:48 PM
Package URL
pkg:socket/skills-sh/cat-xierluo%2Flegal-skills%2Fdouyin-batch-download%2F@fb4d425ce322d0c60c8c0cb47cd4692bf978090ca37c045baa6e8b5a8a05a967