tiktok-automation
Warn
Audited by Socket on Mar 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s purpose matches TikTok automation, but it understates setup and trust boundaries. Official evidence shows Rube/Composio is a legitimate same-org intermediary, yet the skill inaccurately says endpoint-only/no-key setup and routes content, account data, and OAuth-linked actions through a third-party platform rather than direct TikTok APIs. The largest risk is autonomous public posting plus opaque credential/data mediation through Rube.
Confidence: 85%Severity: 66%
Audit Metadata