scraping-tiktok-videos-by-hashtag
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides example commands for executing a local script
scripts/run_actor.jsand usingcurlto interact with the Apify REST API. These are standard operations for a data collection skill and target the vendor's own infrastructure (Apify). - [DATA_EXPOSURE]: The skill references the
APIFY_TOKENenvironment variable and suggests storing it in a.envfile, which is a standard and recommended practice for managing API credentials securely. - [DYNAMIC_EXECUTION]: The
customMapFunctioninput parameter allows for a JavaScript string to be passed to the Apify actor. While this allows code execution on the Apify platform, it is a standard feature of the underlying tool for data transformation and does not represent a local vulnerability for the agent or user.
Audit Metadata