finding-tiktok-creators-by-location
Warn
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill defines a
customMapFunctioninput parameter designed to accept a JavaScript function as a string. This enables dynamic code execution at runtime, which serves as a significant attack surface if the execution environment is not strictly sandboxed. - [COMMAND_EXECUTION]: The provided documentation instructs users to execute a local script,
scripts/run_actor.js, via the command line. This script accepts arbitrary JSON strings as input for the--inputflag, which can lead to command injection or local code execution vulnerabilities if the script does not rigorously validate and sanitize these arguments. - [INDIRECT_PROMPT_INJECTION]: The skill processes data retrieved from TikTok, which is an untrusted external source. This introduces the risk that malicious instructions hidden within TikTok metadata (such as bios, video descriptions, or hashtags) could be ingested by the agent.
- Ingestion points: Data is fetched from TikTok URLs provided in the
startUrlsparameter. - Boundary markers: There are no identified delimiters or instructions to ignore embedded commands within the scraped data.
- Capability inventory: The skill can perform network operations via the Apify API and execute local shell commands through the referenced Node.js script.
- Sanitization: No sanitization, escaping, or validation logic is specified for the raw data returned from the scraper before it is processed for scoring and ranking.
Audit Metadata