Навыки douyin-comment-insights

📦

douyin-comment-insights

Name: douyin-comment-insights
Author: devinchen2014

Ревизия содержимого r1 Средний риск ⚙️ Внешние команды🌐 Доступ к сети🔑 Переменные окружения

Analyze Douyin Comments and Customer Needs

Douyin comment threads can hide recurring questions, purchase concerns, and unmet needs. This skill guides SocialDataX retrieval and organizes returned comments into evidence-based findings and practical recommendations.

Поддерживает: Claude Codex Code(CC)

📊 64 Адекватно

Maintain this Skill? Claim it 📊 64 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "douyin-comment-insights" from https://skillstore.io/skills/devinchen2014-douyin-comment-insights.md and its manifest at https://skillstore.io/api/skills/devinchen2014-douyin-comment-insights/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/devinchen2014-douyin-comment-insights.md Подписанный manifest GET /api/skills/devinchen2014-douyin-comment-insights/manifest Подписанный lockfile GET /api/skills/devinchen2014-douyin-comment-insights/lockfile

Протестировать

Использование «douyin-comment-insights». Illustrative comments: 'Is there a smaller size?' and 'Can I buy a compact version?' Summarize needs and propose an action.

Ожидаемый результат:

Scope: two supplied comments, not a platform-wide sample.
Theme: interest in smaller product sizes.
Evidence: 'Is there a smaller size?' and 'Can I buy a compact version?'
Interpretation: a compact option may address an unmet need; these comments do not establish overall demand.
Action: check existing size options and investigate the request in a larger sample.

Использование «douyin-comment-insights». Illustrative run: a 60-comment request returned 40 comments before a network error. A valid continuation token remains available.

Ожидаемый результат:

Coverage: 40 returned comments; retrieval is incomplete.
Recovery: preserve the comments and error, then resolve the network issue.
Remaining allowance: retrieve at most 20 more comments using the returned continuation token and original query.
Reporting: label conclusions as provisional until the planned sample is collected.

Аудит безопасности

Средний риск

v1 • 02.11.2026 Открыть версионный отчет

All 43 static alerts are false positives involving Markdown, documented service links, legitimate credential configuration, video identifiers, or readable Chinese text. A separate medium-severity supply-chain risk exists because the examples execute an unpinned external npm package through npx. No evidence of prompt injection or credential exfiltration was found in the supplied files; external package implementation was not reviewed.

Просканировано файлов

125

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (1)

Средний

SKILL.md:32-44

Unpinned External Package Execution

Examples run npx -y socialdatax-skills@latest, allowing automatic download and execution of a mutable npm release. A compromised release could access the configured API key and local files with the agent's privileges.

All three examples explicitly use npx -y with @latest rather than a reviewed fixed version. This confirms mutable dependency execution, not malicious package behavior.

Факторы риска

⚙️ Внешние команды (28)

🌐 Доступ к сети (3)

SKILL.md:7 SKILL.md:25 SKILL.md:107

🔑 Переменные окружения (6)

SKILL.md:7 SKILL.md:25 SKILL.md:95 SKILL.md:106 SKILL.md:108 SKILL.md:114

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/devinchen2014-douyin-comment-insights/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/devinchen2014-douyin-comment-insights/security.svg)](https://skillstore.io/skills/devinchen2014-douyin-comment-insights?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/devinchen2014-douyin-comment-insights?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/devinchen2014-douyin-comment-insights/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/devinchen2014-douyin-comment-insights.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

devinchen2014. (2026). douyin-comment-insights security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/devinchen2014-douyin-comment-insights/audits/1

Цитата BibTeX

@techreport{devinchen2014-devinchen2014-douyin-comment-insights-2026,
  author = {devinchen2014},
  title = {douyin-comment-insights security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/devinchen2014-douyin-comment-insights/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "douyin-comment-insights security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "devinchen2014"
date-released: "2026-11-02"
url: "https://skillstore.io/skills/devinchen2014-douyin-comment-insights/audits/1"
identifiers:
  - type: other
    value: "skillstore:devinchen2014-douyin-comment-insights:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Plan Audience-Focused Content

Review comments on a supplied video to identify recurring questions and propose follow-up topics grounded in visible feedback.

Find Product Improvement Leads

Group returned comments into pain points, purchase concerns, and unmet needs while distinguishing direct evidence from product hypotheses.

Prepare Customer-Service FAQ Topics

Extract recurring questions and concerns from comments and replies to prioritize FAQ topics and response review.

Попробуйте эти промпты

Summarize One Video

Analyze the first page of comments for [Douyin content URL]. Summarize recurring themes and questions. State the sample scope and quote only returned comments.

Extract Purchase Concerns

Retrieve up to [comment limit] comments for [video ID]. Group purchase concerns and unmet needs. Separate direct evidence from interpretations and suggest product questions.

Inspect a Reply Thread

For [video ID] and [parent comment ID], retrieve up to [reply limit] replies. Track continuation tokens and summarize recurring questions. Draft evidence-based FAQ topics.

Recover a Partial Research Run

Review [partial results] and [original retrieval limits]. Preserve existing comments and errors. Resume only with valid continuation tokens and remaining limits. Report coverage and prioritized recommendations.

Лучшие практики

Start with one page or an explicit item limit, then confirm any expansion that may consume additional provider credits.
Keep API keys in the configured environment and pass user input through argument arrays or correctly escaped shell arguments.
State collection scope, preserve continuation tokens, and distinguish quoted comments from interpretations and recommendations.

Избегать

Treating a first-page sample or empty continuation token as proof of complete audience coverage.
Inserting raw share text into a shell command or exposing the API key in prompts and reports.
Restarting partial runs from page one or enabling unlimited collection without considering cost and scope.

Часто задаваемые вопросы

What inputs does this skill accept?

Use a Douyin content URL, short link, share text, or video ID. Reply retrieval also needs the parent comment ID.

What setup is required?

Configure SOCIALDATAX_API_KEY and provider balance. Use Node.js and npm for the CLI, or an existing integration exposing the documented MCP tools.

Does it publish replies or change my account?

No. The documented workflow retrieves comments and replies without login, posting, likes, comments, or account changes.

Can it retrieve every comment?

Complete coverage is not guaranteed. Pagination follows returned tokens, and an empty token does not prove that every comment was retrieved.

How are failed requests handled?

Preserve partial results and resume with valid tokens and remaining limits. Stop repeated retries for insufficient balance and use the documented provider billing page.

Is the CLI implementation included in this skill?

No. The examples execute an external npm package using the mutable latest release. Pin and review a version before running it.