douyin-downloader

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated capability is plausible and the requested API key/ffmpeg access are proportionate, but the trust chain is inconsistent. The homepage and verified upstream point to an archived Python MCP project, while this skill invokes an unverified local Node script not shown here, so the real install/runtime behavior and credential routing cannot be confirmed.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Sep 15, 2026, 02:20 PM
Package URL
pkg:socket/skills-sh/freestylefly%2Fcanghe-skills%2Fdouyin-downloader%2F@5aa89a9b03264ecd699eb41ae4484379da5482275a0aaec9beb4c22d417e46f1