tiktok-research
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with api.crawlora.net to fetch TikTok profiles, videos, and ads. This is a vendor-controlled API corresponding to the skill author crawlora-org.
- [COMMAND_EXECUTION]: Provides a bash helper script scripts/crawlora.sh that uses curl and jq. The script correctly uses quoting and --data-urlencode to prevent command or argument injection.
- [CREDENTIALS_UNSAFE]: The skill uses the CRAWLORA_API_KEY environment variable for authentication, which is a secure method for managing secrets and prevents accidental exposure.
Audit Metadata