tiktok-automation

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but its trust and data-flow story is inconsistent with current official docs. It relies on a deprecated remote MCP endpoint, routes TikTok auth through a third-party intermediary, and understates credential/app requirements. No direct malware indicators or hidden exfiltration were found, but the setup is unreliable and medium risk.

Confidence: 90%Severity: 62%
Audit Metadata
Analyzed At
Oct 2, 2026, 01:20 PM
Package URL
pkg:socket/skills-sh/davepoon%2Fbuildwithclaude%2Ftiktok-automation%2F@207dce4cdba7ff4a85dfd4692b37b10bad32a7442f5ac38fb2ffc83b32b24737