tiktok-automation
Warn
Audited by Snyk on Feb 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). This skill explicitly fetches and ingests user-generated content from TikTok (e.g., via TIKTOK_LIST_VIDEOS, TIKTOK_GET_USER_PROFILE, and TIKTOK_FETCH_PUBLISH_STATUS in SKILL.md) as part of required workflows, meaning untrusted third-party content can influence decisions like publishing or management actions.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill requires connecting to and calling the Rube MCP endpoint (https://rube.app/mcp) at runtime and explicitly instructs calling RUBE_SEARCH_TOOLS to fetch current tool schemas, which directly control the agent's available tools/prompts.
Audit Metadata