douyin-scraper

SUSPICIOUS: the core scraping and Lark writeback behavior is coherent, but the skill goes beyond passive collection by enabling automated public commenting from a logged-in browser. Its data flows are mostly aligned, yet video analysis can transmit scraped content to MiniMax, and the browser/CDP access materially increases impact if misused.

This module appears to be a Douyin scraper that collects metadata via Playwright, optionally downloads and analyzes video frames using ffmpeg and an external 'mmx vision' tool, and can optionally post comments using a live logged-in browser session. No clear malicious payload (exfiltration/backdoor/reverse shell) is present in the shown code. However, it disables TLS certificate verification globally (high security risk), executes external binaries on network-downloaded content, and supports CDP attachment and authenticated comment posting, which are powerful capabilities and warrant careful trust boundaries and hardening.