douyin-creator-discovery

SUSPICIOUS: the stated purpose is coherent, but the skill’s footprint is enlarged by automatic transitive installation of BrowserAct and delegation to an external CLI/service. Install provenance appears plausibly official and package-manager based, so this is not confirmed malware, but the no-confirmation install behavior and second-layer trust chain make it medium-to-high risk.