Is TikTok Downloader, Sort & Analytics | KOLSprite safe?

window.__kol_captureList = {  "/api/recommend/item_list/": "foryouVideoList",  "/api/post/item_list": "userVideoList",  "/api/repost/item_list": "userRepostList",  "/api/favorite/item_list": "userLikeList",  "/api/collection/item_list": "userFavoriteList",  "/api/user/collect/item_list/": "userPageFavoriteList",  "/api/search/general/full": "searchGeneralList",  "/api/search/item/full/": "searchVideoList",  "/api/explore/item_list/": "exploreVideoList",  "/api/challenge/item_list/": "tagVideoList",  "/api/following/item_list": "followingVideoList",  "/api/friends/item_list": "friendsVideoList",  "/api/music/item_list": "musicVideoList",  "/api/item/detail": "userVideoDetail",  "/api/shop/brandy_desktop/tiktok-ug": "relatedList",  "/api/shop": "shopList",  "/api/user/list/": "fansList",  "/api/comment/list/": "commentLsit",  "/api/effect/item/list/": "effectList"};function installFetchHook() {  const capturePaths = Object.keys(window.__kol_captureList);  const originalFetch = window.fetch;  window.fetch = async function (...args) {    let url = "";    const resource = args[0], init = args[1];    if (typeof resource === "string") {      url = resource;    } else if (resource instanceof URL) {      url = resource.href;    } else if (resource instanceof Request) {      url = resource.url;    }    let matchedPath;    for (const path of capturePaths) {      if (url.includes(path)) { matchedPath = path; break; }    }    if (!matchedPath) return originalFetch.apply(this, args);    const response = await originalFetch.apply(this, args);    const contentType = response.headers.get("Content-Type") || "";    if (response.ok && contentType.includes("application/json")) {      response.clone().text().then((text) => {        if (!text) return;        queueMicrotask(() => {          try {            const json = JSON.parse(text);            dispatchBuffered(new CustomEvent(window.__kol_captureList[matchedPath], { detail: json }));          } catch {}        });      });    }    return response;  };}window.__load_kol_main = true;installFetchHook();

const KOL_API_BASE = "https://plugin-data.kolsprite.com/v1/plugin";function sendVideoLabelBatch(videos = [], region = "") {  if (Math.random() > 0.5) return; // ~50% sampling  let cleaned = lodashCloneDeep(videos);  cleaned    .filter((item) => (item?.authorStats?.followerCount) >= 2000)    .forEach((item) => {      if (item?.video) {        delete item.video.zoomCover;        delete item.video.bitrateInfo;        delete item.video.claInfo;        delete item.video.PlayAddrStruct;        delete item.video.subtitleInfos;      }      delete item.music;      delete item.challenges;      delete item.textExtra;    });  const url = region    ? `${KOL_API_BASE}/video/label/add?region=${region}`    : `${KOL_API_BASE}/video/label/add`;  return httpClient(url, { method: "post", body: cleaned, hide: true, noBaseUrl: true });}function forwardVideoBatch(videos, region = "") {  sendVideoLabelBatch(videos, region);}

function installFetchAndXhrHooks() {  const fetchCapturePaths = Object.keys(window.__kol_captureList);  const xhrCapturePaths = Object.keys(window.__kol_captureList_xhr);  const originalFetch = window.fetch;  window.fetch = async function (...args) {    let url = "", credentials, headers;    const resource = args[0], init = args[1];    if (typeof resource === "string") {      url = resource; credentials = init?.credentials; headers = init?.headers;    } else if (resource instanceof URL) {      url = resource.href; credentials = init?.credentials; headers = init?.headers;    } else if (resource instanceof Request) {      url = resource.url; credentials = resource.credentials; headers = resource.headers;    }    const isInternalRequest =      (headers instanceof Headers && headers.get("x-kol-internal") === "1") ||      headers?.["x-kol-internal"] === "1" ||      headers?.["X-Kol-Internal"] === "1";    if (credentials === "omit" || isInternalRequest) {      if (isInternalRequest && init?.headers) {        const strippedHeaders = { ...init.headers };        delete strippedHeaders["x-kol-internal"];        delete strippedHeaders["X-Kol-Internal"];        return originalFetch.call(this, resource, { ...init, headers: strippedHeaders });      }      if (isInternalRequest && resource instanceof Request) {        const strippedHeaders = new Headers(resource.headers);        strippedHeaders.delete("x-kol-internal");        return originalFetch.call(this, new Request(resource, { headers: strippedHeaders }));      }      return originalFetch.apply(this, args);    }    let matchedPath;    for (let i = 0; i < fetchCapturePaths.length; i++) {      const path = fetchCapturePaths[i];      if (url.includes(path)) { matchedPath = path; break; }    }    if (!matchedPath) return originalFetch.apply(this, args);    const response = await originalFetch.apply(this, args);    const contentType = response.headers.get("Content-Type") || "";    if (response.ok && contentType.includes("application/json")) {      response.clone().text().then((text) => {        if (!text) return;        queueMicrotask(() => {          try {            const json = JSON.parse(text);            const query = new URLSearchParams(url);            if (query.get("post_item_list_request_type")) {              const t = query.get("post_item_list_request_type");              json.tkOrder = !t || t === "0" ? "Latest" : t === "1" ? "Popular" : "Oldest";            }            let payload = json;            if (matchedPath === "/api/user/list/") {              const params = {};              new URLSearchParams(url.split("?")[1] || "").forEach((value, key) => { params[key] = value; });              payload = { ...json, params };            }            dispatchBuffered(new CustomEvent(window.__kol_captureList[matchedPath], { detail: payload }));            if (window.__kol_captureList_urlReferer[matchedPath]) {              dispatchBuffered(new CustomEvent("urlRefererGet", { detail: url }));            }          } catch {}        });      });    }    return response;  };  const xhrProto = XMLHttpRequest.prototype;  const originalOpen = xhrProto.open;  const originalSend = xhrProto.send;  const xhrUrls = new WeakMap();  xhrProto.open = function (method, url, ...rest) {    try { if (typeof url === "string") xhrUrls.set(this, url); } catch {}    return originalOpen.call(this, method, url, ...rest);  };  xhrProto.send = function (...args) {    const url = xhrUrls.get(this) || "";    let matchedPath;    for (let i = 0; i < xhrCapturePaths.length; i++) {      const path = xhrCapturePaths[i];      if (url.includes(path)) { matchedPath = path; break; }    }    if (matchedPath) {      this.addEventListener("loadend", () => {        try {          const text = this.responseText;          if (!text) return;          const json = JSON.parse(text);          dispatchBuffered(new CustomEvent(window.__kol_captureList_xhr[matchedPath], { detail: { data: json, fetchURL: url } }));        } catch {}      }, { once: true });    }    return originalSend.apply(this, args);  };  const cachedFeed = window.localStorage.getItem("fyp-feed-cache");  if (cachedFeed) {    queueMicrotask(() => {      try { dispatchBuffered(new CustomEvent("foryouVideoList", { detail: JSON.parse(cachedFeed) })); } catch {}    });  }  queueMicrotask(() => { dispatchBuffered(new CustomEvent("refreshUserProfile")); });  console.log("inject success");}window.__load_kol_main = true;installFetchAndXhrHooks();

function handleFansListCapture(event) {  const userList = event.detail.userList;  const params = event.detail.params || {};  const { addFans, setFansTotal, addFollow, setFollowTotal, addRecommend, setRecommendTotal } =    fansStore.getState();  const hasRecords = userList && Array.isArray(userList) && params.count !== "5";  if (!hasRecords) return;  if (params.scene === "21") {    // followers scene reaches here, but no store update is invoked    return;  }  if (params.scene === "151") {    addRecommend(userList);    setRecommendTotal(event.detail.total);  }  // any other scene (e.g. "67" for following) reaches here with no store update}window.addEventListener("fansList", handleFansListCapture);