tiktok-upload

Warn

Audited by Socket on Oct 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is broadly aligned with TikTok uploading, but it carries elevated risk because it performs authenticated public posting and relies on a local cookie/session file plus a third-party patched browser automation stack. I do not see clear credential theft or exfiltration, so this is high-risk automation rather than confirmed malware.

Confidence: 89%Severity: 71%
Audit Metadata
Analyzed At
Oct 24, 2026, 04:53 PM
Package URL
pkg:socket/skills-sh/dreammis%2Fsocial-auto-upload%2Ftiktok-upload%2F@eafbce275c6298f605ddccc40ad4a832f673efc38d83865850a8b2b68798ee7e