tiktok-launch-video

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow allows fetching public web pages via WebFetch based on user-supplied URLs and extracting brand identity or product context from them.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains tools for interacting with TikTok Ads, specifically mcp__cogny__tiktok_ads__*, which includes creating campaigns, ad groups, and setting ad budgets (tiktok_ads__tool_create_ad_group(...) # placement: TIKTOK only; daily budget; status: DISABLE). Managing ad spend budgets via API is explicitly flagged as a direct financial execution capability.