Doubao Desktop (Windows): Full Inventory of 106 Built-in Skills and Pentest Keyword Audit

Bottom line upfront: Doubao Desktop (Windows) bundles 106 built-in skills as zip archives, stashed under AppData\Local\Doubao\Application\app\task-mode-resource\runtime-bundle\packages\. Each zip contains a SKILL.md; a co-located manifest.json serves as the full index. The user-installed skill directory is User Data\Default\.doubao\agent_mode\workspace\.user_skills, which is empty by default. All 110 packages were unpacked and scanned for keywords including “penetration/pentest/exploit/privilege escalation/sqlmap” — zero hits. Doubao’s built-in skill library contains no offensive security capabilities whatsoever.

How It Started: A “Find the Files” Task That Exposed a Blind Spot

Last night I needed to answer a simple question: where does Doubao Desktop store its skills, and are any of them penetration-testing related? The first-pass search came back squeaky clean — the skills directory existed but was empty, there was only a public_config.json under Roaming, and grepping the 1.8 GB installation directory for “skill” returned zero hits.

That “zero hits” was itself the blind spot. The 106 skills were sitting right there in the install directory, but all of them were stored as compressed zip archives — and grep and find don’t descend into deflate-compressed content. An outer keyword sweep effectively never touched the skill bodies at all. Only after unpacking each one in the review phase did the true scale become visible: 110 files under packages\, of which 106 are skill-*.zip, each containing a single SKILL.md. A co-located 84 KB manifest.json has a skill_meta_list field that fully registers all 106 skills with their IDs, names, descriptions, versions, and checksums.

One command gets you the full index:

1
2

python3 -c "import json; m=json.load(open('manifest.json',encoding='utf-8')); print(len(m['skill_meta_list']))"
# Output: 106

Each record in the manifest looks like this:

1
2
3
4
5
6
7
8
9

{
  "skill_id": "360359429890",
  "name": "ppt",
  "description": "Feishu Slides: create and edit slides…",
  "version": "1.0.15",
  "skill_type": 2,
  "checksum": "3f345a337e8b5d02f0ab7506dcdffbfa",
  "local_path": "packages/skill-3f345a337e8b5d02f0ab7506dcdffbfa.zip"
}

File names use checksums, not skill names — so a raw directory listing won’t identify any skill. You have to read the manifest to map them. This also explains why the outer-layer search “looked like there was nothing there.”

What the 106 Skills Actually Do

Categorizing the manifest entry by entry reveals a very clear picture: Doubao Desktop’s skill library is the operations layer for ByteDance’s entire product ecosystem.

A few findings worth calling out individually:

Feishu accounts for one-fifth. 20 of the 106 skills are lark-* plus ppt/sheet/word, covering IM, calendar, mail, approvals, OKRs, attendance, knowledge base, and Bitable. Doubao Desktop’s depth of integration with Feishu has reached the point where “every Feishu capability has a corresponding skill.”

byted-mediakit is the heaviest cluster. Five sub-skills (shared/audio/video/image/editing) are all audio/video engineering capabilities — vocal separation, frame extraction, watermark handling, highlight clipping — all at version 1.0.13, clearly delivered as a unit by the same team.

Finance & investment research ranks in the top four. 10 skills cover the full chain from announcement interpretation, earnings analysis, and DCF/LBO valuation modeling to wealth planning and private equity project screening. Notably, doubao-finance-model-builder explicitly mentions “machine-blocking quality gates” in its description.

Version numbers reveal iteration velocity. doubao-enterprise-search is already at 1.0.33, html at 1.0.32, sheet at 1.0.30, doubao-finance-model-builder at 1.0.25 — two decimal places after the version number means dozens of internal releases.

Pentest Audit: How We Confirmed There Are None

The method wasn’t just “look at the names once.” Three layers:

1. Manifest layer: Full-text scan of all 106 skill names + descriptions for 渗透/pentest/penetration/exploit/提权/漏洞/metasploit/burp/攻击/payload/破解/sqlmap — zero hits;
2. Zip content layer: First unpacked a sample zip and verified that zipgrep can match compressed content using its actual SKILL.md, then scanned all 110 zips with the same keyword set — zero hits;
3. Semantic layer: Read through all 106 descriptions in the manifest in full. The closest matches were doubao-pc-optimizer (generates “safe cleanup scripts,” referring to disk cleanup) and doubao-compliance-assessment-public (compliance assessment) — both use “安全/safe” in its ordinary sense, unrelated to offensive security.

Conclusion: Doubao’s built-in skill library is clean, with no penetration testing or vulnerability exploitation capabilities. This is consistent with common sense — a consumer-facing desktop assistant has no compliant use case for built-in attack tools.

Full Inventory

All 106 skills below are sourced from the skill_meta_list in manifest.json. Descriptions are truncated to 80 characters; for the full versions, read the manifest yourself to reproduce.

Feishu / Lark Ecosystem (20)

Creative & Media Production (15)

Office & System (11)

Finance & Investment Research (10)

Legal & Compliance (9)

Academic Research (8)

Healthcare (7)

Content Creation (7)

Product & Data (7)

Cross-Border E-Commerce / E-Commerce Operations (7)