skills/fetcher-sh/fetcher-skills/tiktok-api/Socket

tiktok-api

Warn

Audited by Socket on Aug 12, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is coherent for an unofficial TikTok data gateway, but all requests, credentials, and optional payment authorization flow through fetcher.sh instead of official TikTok endpoints. No installer or malware-like payload is present; the main risk is third-party API/key/payment trust and potential autonomous spending.

Confidence: 88%Severity: 56%

Audit Metadata

Analyzed At

Aug 12, 2026, 07:35 PM

Package URL

pkg:socket/skills-sh/fetcher-sh%2Ffetcher-skills%2Ftiktok-api%2F@f55d71526a5c6e16c8c69c2a2c8be6c8ff5c85e78195d14e78ae4125a95d721f