The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill clones an external code repository from https://github.com/jiji262/douyin-downloader.git during the install-douyin command execution.
[REMOTE_CODE_EXECUTION]: Code fetched from the external repository is executed locally via uv run python run.py, allowing for the execution of unverified third-party logic. Additionally, the build_douyin_request_config function dynamically constructs a Python script as a string and executes it using python -c to perform configuration merging.
[COMMAND_EXECUTION]: The script uses subprocess.run to manage external system tools, call the yt-dlp binary, and start the wx_video_download service as a background daemon process.
[CREDENTIALS_UNSAFE]: The skill automates the extraction of sensitive session cookies (e.g., hy_token, hy_user, and Douyin cookies) from browser sessions via Playwright and stores them in local configuration files. While it attempts to secure these files with chmod 600, handling live authentication tokens increases the risk of credential exposure if the local environment is compromised.

video-downloader