qinghu-tiktok-video-clone
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external content like TikTok video details and comments from the iqinghu.com API, which may contain instructions targeting the AI agent.
- Ingestion points: Data enters through API responses from https://www.iqinghu.com/api/desktop/qh/mcp as described in SKILL.md.
- Boundary markers: The skill lacks explicit instructions for the agent to use delimiters or ignore instructions that may be embedded within the retrieved video data or user comments.
- Capability inventory: The skill possesses network communication capabilities (curl, fetch, requests) and triggers downstream data processing workflows.
- Sanitization: No specific sanitization or filtering logic is provided to handle potentially malicious content within the external API response before it is processed by the agent.
Audit Metadata