tiktok-app-marketing
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with well-known and trusted service providers, including OpenAI, Stability AI, Replicate, Discord, and RevenueCat. These connections are standard for the skill's content generation and marketing analytics functions and target verified official domains.- [COMMAND_EXECUTION]: The script
scripts/post-to-tiktok.jsutilizeschild_process.spawnSyncto execute the internalscripts/send-to-discord.jsscript as a backward-compatibility wrapper. This execution is limited to internal skill files and does not involve untrusted inputs.- [SAFE]: Sensitive data such as API keys and webhook URLs are not hardcoded but are instead managed via user-provided configuration files.- [SAFE]: External data ingested from TikTok profile pages is parsed using regular expressions and sanitized into numeric values before use in analytical reports, effectively mitigating indirect prompt injection risks.
Audit Metadata