douyin-upload

Warn

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The setup instructions provided in SKILL.md require the execution of sudo apt install to install system dependencies, which grants the process administrative privileges.
  • [EXTERNAL_DOWNLOADS]: The skill performs external downloads of software components, specifically installing the uv package manager and downloading Chromium browser binaries through the patchright automation library.
  • [COMMAND_EXECUTION]: The skill utilizes scripts/utils/stealth.min.js, a large minified JavaScript payload injected into the browser context. This file is intended to bypass website bot-detection mechanisms; however, its size and minification make it difficult to audit for potentially malicious side effects.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 1, 2026, 08:16 AM