douyin-downloader-hardened
Warn
Audited by Socket on Apr 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is broadly aligned with downloading Douyin videos, but it relies on a third-party TikHub token/service instead of official Douyin endpoints and includes a referral signup link. Install behavior appears limited and not overtly malicious, yet credential forwarding and intermediary routing make the data flow higher risk than a simple downloader would imply.
Confidence: 86%Severity: 56%
Audit Metadata