📦
Audit History
douyin-search-keyword - 5 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v5 Latest | Jul 7, 2026, 08:15 AM | 4 confirmed | 13 | No capability change |
| v4 | Jul 7, 2026, 08:15 AM | 4 confirmed | 13 | External commands Contains scripts |
| v3 | Jun 30, 2026, 09:43 PM | No confirmed findings | 4 | No capability change |
| v2 | Jun 30, 2026, 09:43 PM | No confirmed findings | 4 | Contains scripts |
| v1 | Apr 6, 2026, 08:50 AM | 2 confirmed | 1 | Baseline |
Audit version 5 Latest
Jul 7, 2026, 08:15 AM
Most static shell-execution, obfuscation, path-traversal, and documentation URL findings are false positives caused by JavaScript template literals, ANSI color codes, static imports, or examples. Real risk remains from outbound requests to www.guaikei.com, sensitive token handling, local result persistence, query-string credentials, and a hardcoded default token.
7
Files scanned
1,043
Lines analyzed
21
Review items
0
False positives ignored
Confirmed security concerns (4)
High
Environment file access
const token = key.apiKey(process.env.GUAIKEI_API_TOKEN);
The code reads GUAIKEI_API_TOKEN and later uses the token for outbound API calls. API tokens are sensitive and can be exposed if request handling or logs leak URLs.
High
Hardcoded Default API Token
When GUAIKEI_API_TOKEN is missing or invalid, lib/key.js returns a fixed default token. A bundled shared token can hide network use, mix user traffic, and create quota or accountability risk.
The code explicitly warns about a missing token and returns a fixed 32-character token value on line 20. This is direct evidence of a shared fallback credential.
High
API Token Sent In URL Query Parameters
The API token is placed in request query parameters for task creation and result polling. Query-string credentials are commonly captured in logs, proxies, and error reports.
Both request builders include token in params and append querystring.stringify(params) to the path. The credential is therefore carried in the URL path for outbound requests.
Medium
Public Social Content Collection With Local Persistence
The skill extracts public Douyin links and media URLs, recommends retaining temporary CDN links, and writes full search results locally. This creates compliance and retention risk for collected social-media data.
The documentation describes link extraction and retention of CDN links, while the script writes final results to last-search.json. The finding is about collection and retention intent, not a single API call.
Capability review items (13)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
HTTP/HTTPS request · 2 occurrences
const req = https.request(options, (res) => {
The code performs outbound HTTPS requests to the hardcoded www.guaikei.com API. User keywords and API token-derived parameters are sent outside the local environment.
Medium
HTTP client library · 2 occurrences
const req = https.request(options, (res) => {
The code performs outbound HTTPS requests to the hardcoded www.guaikei.com API. User keywords and API token-derived parameters are sent outside the local environment.
Medium
Node.js fs operations
fs.unlinkSync(outputPath);
The script deletes local output or lock files under the scripts directory. The paths are constrained, but the behavior is still a local filesystem side effect.
Medium
Node.js fs operations · 2 occurrences
fs.unlinkSync(taskLockFile);
The script deletes local output or lock files under the scripts directory. The paths are constrained, but the behavior is still a local filesystem side effect.
Medium
Node.js fs operations
fs.writeFileSync(taskLockFile, Date.now().toString(), { mode: 0o600 });
The script creates a local lock file derived from sanitized keyword parameters. The path is constrained, but the skill still modifies the local filesystem.
Medium
Node.js fs operations
fs.writeFileSync(outputPath, JSON.stringify(finalOutput, null, 2));
The script writes full search output to scripts/last-search.json. The path is fixed, but local persistence of collected social-media data is a real exposure surface.
Medium
Synchronous file operations
fs.writeFileSync(taskLockFile, Date.now().toString(), { mode: 0o600 });
The script creates a local lock file derived from sanitized keyword parameters. The path is constrained, but the skill still modifies the local filesystem.
Medium
Synchronous file operations
fs.writeFileSync(outputPath, JSON.stringify(finalOutput, null, 2));
The script writes full search output to scripts/last-search.json. The path is fixed, but local persistence of collected social-media data is a real exposure surface.
Medium
Environment variable access (dot notation)
const token = key.apiKey(process.env.GUAIKEI_API_TOKEN);
The script reads GUAIKEI_API_TOKEN from process.env and passes it into API token handling. This is expected configuration, but it is sensitive environment access.
Medium
Environment variable object
const token = key.apiKey(process.env.GUAIKEI_API_TOKEN);
The script reads GUAIKEI_API_TOKEN from process.env and passes it into API token handling. This is expected configuration, but it is sensitive environment access.
Risk Factors
⚙️ External commands (59)
lib/douyin.js:15 lib/douyin.js:19 lib/douyin.js:23 lib/douyin.js:28 lib/douyin.js:52 lib/douyin.js:56 lib/douyin.js:60 lib/douyin.js:65 lib/douyin.js:73 lib/douyin.js:77 lib/douyin.js:78 lib/douyin.js:79 lib/douyin.js:80 lib/douyin.js:82 lib/douyin.js:85 lib/douyin.js:88 lib/douyin.js:90 lib/douyin.js:91 lib/douyin.js:92 lib/douyin.js:93 lib/douyin.js:97 lib/douyin.js:108 lib/douyin.js:117 lib/douyin.js:121 lib/douyin.js:175 lib/douyin.js:179 lib/douyin.js:189 lib/douyin.js:191 lib/douyin.js:211 lib/douyin.js:219 lib/douyin.js:223 lib/douyin.js:228 lib/douyin.js:285 lib/douyin.js:289 lib/douyin.js:299 lib/douyin.js:301 lib/utils.js:22 scripts/search.js:13-33 scripts/search.js:80 scripts/search.js:86 scripts/search.js:92 scripts/search.js:96 scripts/search.js:100 scripts/search.js:101 scripts/search.js:105 scripts/search.js:126 scripts/search.js:129 scripts/search.js:160 scripts/search.js:197 scripts/search.js:200 scripts/search.js:206 SKILL.md:266 SKILL.md:270-272 SKILL.md:272-287 SKILL.md:287-302 SKILL.md:302-308 SKILL.md:308-349 SKILL.md:349-355 SKILL.md:355-369
🌐 Network access (14)
📁 Filesystem access (15)
lib/douyin.js:88 scripts/search.js:40 scripts/search.js:108 scripts/search.js:112 scripts/search.js:156 scripts/search.js:205 scripts/search.js:39 scripts/search.js:102 scripts/search.js:103 scripts/search.js:155 scripts/search.js:112 scripts/search.js:205 scripts/search.js:3 scripts/search.js:4 scripts/search.js:5
🔑 Env variables (2)
Audited by: codex
Jul 7, 2026, 08:15 AM
Most static shell-execution, obfuscation, path-traversal, and documentation URL findings are false positives caused by JavaScript template literals, ANSI color codes, static imports, or examples. Real risk remains from outbound requests to www.guaikei.com, sensitive token handling, local result persistence, query-string credentials, and a hardcoded default token.
7
Files scanned
1,043
Lines analyzed
21
Review items
0
False positives ignored
Confirmed security concerns (4)
High
Environment file access
const token = key.apiKey(process.env.GUAIKEI_API_TOKEN);
The code reads GUAIKEI_API_TOKEN and later uses the token for outbound API calls. API tokens are sensitive and can be exposed if request handling or logs leak URLs.
High
Hardcoded Default API Token
When GUAIKEI_API_TOKEN is missing or invalid, lib/key.js returns a fixed default token. A bundled shared token can hide network use, mix user traffic, and create quota or accountability risk.
The code explicitly warns about a missing token and returns a fixed 32-character token value on line 20. This is direct evidence of a shared fallback credential.
High
API Token Sent In URL Query Parameters
The API token is placed in request query parameters for task creation and result polling. Query-string credentials are commonly captured in logs, proxies, and error reports.
Both request builders include token in params and append querystring.stringify(params) to the path. The credential is therefore carried in the URL path for outbound requests.
Medium
Public Social Content Collection With Local Persistence
The skill extracts public Douyin links and media URLs, recommends retaining temporary CDN links, and writes full search results locally. This creates compliance and retention risk for collected social-media data.
The documentation describes link extraction and retention of CDN links, while the script writes final results to last-search.json. The finding is about collection and retention intent, not a single API call.
Capability review items (13)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
HTTP/HTTPS request · 2 occurrences
const req = https.request(options, (res) => {
The code performs outbound HTTPS requests to the hardcoded www.guaikei.com API. User keywords and API token-derived parameters are sent outside the local environment.
Medium
HTTP client library · 2 occurrences
const req = https.request(options, (res) => {
The code performs outbound HTTPS requests to the hardcoded www.guaikei.com API. User keywords and API token-derived parameters are sent outside the local environment.
Medium
Node.js fs operations
fs.unlinkSync(outputPath);
The script deletes local output or lock files under the scripts directory. The paths are constrained, but the behavior is still a local filesystem side effect.
Medium
Node.js fs operations · 2 occurrences
fs.unlinkSync(taskLockFile);
The script deletes local output or lock files under the scripts directory. The paths are constrained, but the behavior is still a local filesystem side effect.
Medium
Node.js fs operations
fs.writeFileSync(taskLockFile, Date.now().toString(), { mode: 0o600 });
The script creates a local lock file derived from sanitized keyword parameters. The path is constrained, but the skill still modifies the local filesystem.
Medium
Node.js fs operations
fs.writeFileSync(outputPath, JSON.stringify(finalOutput, null, 2));
The script writes full search output to scripts/last-search.json. The path is fixed, but local persistence of collected social-media data is a real exposure surface.
Medium
Synchronous file operations
fs.writeFileSync(taskLockFile, Date.now().toString(), { mode: 0o600 });
The script creates a local lock file derived from sanitized keyword parameters. The path is constrained, but the skill still modifies the local filesystem.
Medium
Synchronous file operations
fs.writeFileSync(outputPath, JSON.stringify(finalOutput, null, 2));
The script writes full search output to scripts/last-search.json. The path is fixed, but local persistence of collected social-media data is a real exposure surface.
Medium
Environment variable access (dot notation)
const token = key.apiKey(process.env.GUAIKEI_API_TOKEN);
The script reads GUAIKEI_API_TOKEN from process.env and passes it into API token handling. This is expected configuration, but it is sensitive environment access.
Medium
Environment variable object
const token = key.apiKey(process.env.GUAIKEI_API_TOKEN);
The script reads GUAIKEI_API_TOKEN from process.env and passes it into API token handling. This is expected configuration, but it is sensitive environment access.
Risk Factors
⚙️ External commands (59)
lib/douyin.js:15 lib/douyin.js:19 lib/douyin.js:23 lib/douyin.js:28 lib/douyin.js:52 lib/douyin.js:56 lib/douyin.js:60 lib/douyin.js:65 lib/douyin.js:73 lib/douyin.js:77 lib/douyin.js:78 lib/douyin.js:79 lib/douyin.js:80 lib/douyin.js:82 lib/douyin.js:85 lib/douyin.js:88 lib/douyin.js:90 lib/douyin.js:91 lib/douyin.js:92 lib/douyin.js:93 lib/douyin.js:97 lib/douyin.js:108 lib/douyin.js:117 lib/douyin.js:121 lib/douyin.js:175 lib/douyin.js:179 lib/douyin.js:189 lib/douyin.js:191 lib/douyin.js:211 lib/douyin.js:219 lib/douyin.js:223 lib/douyin.js:228 lib/douyin.js:285 lib/douyin.js:289 lib/douyin.js:299 lib/douyin.js:301 lib/utils.js:22 scripts/search.js:13-33 scripts/search.js:80 scripts/search.js:86 scripts/search.js:92 scripts/search.js:96 scripts/search.js:100 scripts/search.js:101 scripts/search.js:105 scripts/search.js:126 scripts/search.js:129 scripts/search.js:160 scripts/search.js:197 scripts/search.js:200 scripts/search.js:206 SKILL.md:266 SKILL.md:270-272 SKILL.md:272-287 SKILL.md:287-302 SKILL.md:302-308 SKILL.md:308-349 SKILL.md:349-355 SKILL.md:355-369
🌐 Network access (14)
📁 Filesystem access (15)
lib/douyin.js:88 scripts/search.js:40 scripts/search.js:108 scripts/search.js:112 scripts/search.js:156 scripts/search.js:205 scripts/search.js:39 scripts/search.js:102 scripts/search.js:103 scripts/search.js:155 scripts/search.js:112 scripts/search.js:205 scripts/search.js:3 scripts/search.js:4 scripts/search.js:5
🔑 Env variables (2)
Audited by: codex
Jun 30, 2026, 09:43 PM
Static shell-execution alerts are false positives caused by JavaScript template literals and documentation command examples. The confirmed risk is high because this community skill runs a Node.js script, reads GUAIKEI_API_TOKEN, sends the token and search terms to www.guaikei.com, and writes search output to local files.
7
Files scanned
1,043
Lines analyzed
8
Review items
2
False positives ignored
Capability review items (4)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Environment Token Sent to Third-Party API
The command reads GUAIKEI_API_TOKEN and passes it into requests to www.guaikei.com. This is intended API use, but it exposes user search terms and credentials to an external service controlled outside the marketplace.
The token is read from process.env and passed to createWithRetry and searchWithRetry. Both request builders use the external hostname www.guaikei.com.
High
API Token Included in Request URL Query Parameters
The API token is placed in query parameters for both task creation and result lookup. Query parameters are commonly captured by proxies, server logs, and debugging tools.
The request path is built with querystring.stringify(params), and params includes token in both API calls. This is a clear credential exposure pattern even if the service is legitimate.
Medium
Hardcoded Default API Token
If GUAIKEI_API_TOKEN is missing or invalid, the skill silently falls back to a hardcoded token. This can route user searches through a shared credential without explicit consent.
The fallback token is returned directly when the environment value is absent, empty, non-string, or not 32 characters. The code labels this as a default experience token.
Medium
Search Results Persisted to Local File
The script writes the complete final output to scripts/last-search.json. The results may include public content links, author metadata, timestamps, and the user search keyword.
The writeFileSync call stores finalOutput after it is populated with keyword, result metadata, and content URLs. The data appears public, but local persistence is not optional.
Static false positives ignored (2)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Low
Static External Command Alerts Are False Positives
The reported backtick locations are JavaScript template literals or Markdown command examples, not shell execution APIs. No evidence of child_process, eval, or shell backtick execution was found in the inspected files.
The cited code uses console output strings and documentation blocks. These constructs do not execute commands in Node.js or Markdown.
Low
Static Path Traversal Alerts Are Mostly False Positives
The ../lib imports are normal relative module imports, and the image join operation is output formatting. Keyword-derived lock files are constrained by sanitization, but still create local files from user input.
The imports do not traverse user-controlled paths. The remaining lock-file path uses sanitized keywords, so traversal is unlikely, but filesystem side effects remain real.
Risk Factors
⚡ Contains scripts (3)
🌐 Network access (3)
📁 Filesystem access (3)
🔑 Env variables (2)
Detected Patterns
External HTTPS Requests with Credential ParametersEnvironment Variable Access for API CredentialLocal File Creation and Result Persistence
Audited by: codex
Jun 30, 2026, 09:43 PM
Static shell-execution alerts are false positives caused by JavaScript template literals and documentation command examples. The confirmed risk is high because this community skill runs a Node.js script, reads GUAIKEI_API_TOKEN, sends the token and search terms to www.guaikei.com, and writes search output to local files.
7
Files scanned
1,043
Lines analyzed
8
Review items
2
False positives ignored
Capability review items (4)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Environment Token Sent to Third-Party API
The command reads GUAIKEI_API_TOKEN and passes it into requests to www.guaikei.com. This is intended API use, but it exposes user search terms and credentials to an external service controlled outside the marketplace.
The token is read from process.env and passed to createWithRetry and searchWithRetry. Both request builders use the external hostname www.guaikei.com.
High
API Token Included in Request URL Query Parameters
The API token is placed in query parameters for both task creation and result lookup. Query parameters are commonly captured by proxies, server logs, and debugging tools.
The request path is built with querystring.stringify(params), and params includes token in both API calls. This is a clear credential exposure pattern even if the service is legitimate.
Medium
Hardcoded Default API Token
If GUAIKEI_API_TOKEN is missing or invalid, the skill silently falls back to a hardcoded token. This can route user searches through a shared credential without explicit consent.
The fallback token is returned directly when the environment value is absent, empty, non-string, or not 32 characters. The code labels this as a default experience token.
Medium
Search Results Persisted to Local File
The script writes the complete final output to scripts/last-search.json. The results may include public content links, author metadata, timestamps, and the user search keyword.
The writeFileSync call stores finalOutput after it is populated with keyword, result metadata, and content URLs. The data appears public, but local persistence is not optional.
Static false positives ignored (2)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Low
Static External Command Alerts Are False Positives
The reported backtick locations are JavaScript template literals or Markdown command examples, not shell execution APIs. No evidence of child_process, eval, or shell backtick execution was found in the inspected files.
The cited code uses console output strings and documentation blocks. These constructs do not execute commands in Node.js or Markdown.
Low
Static Path Traversal Alerts Are Mostly False Positives
The ../lib imports are normal relative module imports, and the image join operation is output formatting. Keyword-derived lock files are constrained by sanitization, but still create local files from user input.
The imports do not traverse user-controlled paths. The remaining lock-file path uses sanitized keywords, so traversal is unlikely, but filesystem side effects remain real.
Risk Factors
⚡ Contains scripts (3)
🌐 Network access (3)
📁 Filesystem access (3)
🔑 Env variables (2)
Detected Patterns
External HTTPS Requests with Credential ParametersEnvironment Variable Access for API CredentialLocal File Creation and Result Persistence
Audited by: codex
Apr 6, 2026, 08:50 AM
Static analyzer produced 59 false positive shell execution alerts - these are JavaScript template literals, not command injection. Legitimate HTTPS API client for Douyin search. Minor risks: third-party API dependency on guaikei.com, hardcoded default token placeholder, and file lock mechanism. No malicious patterns detected after manual review.
8
Files scanned
1,056
Lines analyzed
6
Review items
0
False positives ignored
Confirmed security concerns (2)
Low
Hardcoded Default API Token
Default token 'e10adc3949ba59abbe56e057f20f883e' (MD5 of '123456') is hardcoded as fallback in lib/key.js. While documented as placeholder, it could be accidentally used in production.
Clear evidence of hardcoded credential placeholder - common anti-pattern that could lead to accidental exposure
Low
Third-Party API Dependency
All API requests route through guaikei.com third-party service. Users must trust this intermediary with their search queries and API tokens.
Explicit hostname constant and request targets confirm dependency on external service
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Low
Lock File Race Condition
File-based locking mechanism uses check-then-create pattern which could have race conditions under high concurrency. Lock files use predictable names based on task ID.
Pattern visible in code but impact is limited to local file system - no remote exploitation vector
Risk Factors
🌐 Network access (2)
📁 Filesystem access (2)
🔑 Env variables (1)
Audited by: claude