douyin-subscribe

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

该技能整体目的与能力大体一致:围绕抖音账号监控、定时抓取和报表生成展开,未见明显恶意载荷或危险下载执行链。但它将数据与REDFOX_API_KEY路由到第三方RedFoxHub,并要求Agent静默创建/修改自动化任务、执行定时抓取和打开预览,带来中等风险。判定为SUSPICIOUS而非MALICIOUS:主要问题是第三方数据中介、凭据使用方式和隐蔽自动化行为,而非明确的窃密或恶意代码。

Confidence: 86%Severity: 63%
Audit Metadata
Analyzed At
Aug 6, 2026, 09:25 AM
Package URL
pkg:socket/skills-sh/redfox-data%2Fredfox-community%2Fdouyin-subscribe%2F@85b9bbbaac6532597a80886aba67007421cdad2fadb5aec38112295af2036a68
Security Audit — socket — douyin-subscribe