tiktok-shop-growth-research
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external TikTok sources, which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Video captions extracted via the
caption_extract_urltool (referenced inreferences/winning-content.md) and product metadata/descriptions fetched viaproduct_search(referenced inreferences/opportunity-scan.md). - Boundary markers: While
references/principles.mdestablishes clear labeling for the "evidence chain" (e.g., "MCP observation"), the skill does not define technical delimiters to separate this external data from the system prompt or agent instructions. - Capability inventory: The skill allows the agent to perform multiple search and extraction operations across product, creator, video, and shop data using the KOLSprite MCP.
- Sanitization: There is no evidence of sanitization or filtering for the content ingested from the external platforms.
- [EXTERNAL_DOWNLOADS]: The skill connects to a remote MCP service to perform its core functions.
- Evidence: The configuration in
agents/openai.yamlpoints tohttps://mcp.kolsprite.com/mcp. This is a vendor-owned resource provided by the skill's author to support the intended research capabilities.
Audit Metadata