tiktok

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate instructions and code examples for using the Apideck Ecommerce unified API to interact with TikTok Shop. All network references target official vendor domains (apideck.com) or the service provider (tiktok.com).
  • [CREDENTIALS_UNSAFE]: The documentation correctly instructs users to use environment variables for sensitive API keys (process.env.APIDECK_API_KEY) and provides placeholders for other identifiers, adhering to best practices for secret management.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill retrieves data from external sources via Apideck API endpoints (e.g., listing orders, products, and customers from TikTok Shop).
  • Boundary markers: None explicitly defined in the provided snippets.
  • Capability inventory: The skill enables API interactions via the @apideck/unify library.
  • Sanitization: The skill documentation does not specify sanitization for the returned Ecommerce data, which is standard for an API integration skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 06:33 PM