tiktok-campaign-audit

SUSPICIOUS. The skill’s ad-audit logic is purpose-aligned, but it mixes analytics with live budget/ad-state changes and routes sensitive ad-account data through a third-party MCP service instead of only official APIs. No malware or installer abuse is evident, but the intermediary data flow and autonomous financial actions make this a medium-high security risk.