tiktok-top-ads-search
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious behavior or security vulnerabilities were detected in the skill instructions or scripts. The implementation relies exclusively on the Python standard library, which minimizes risks associated with third-party dependencies.- [COMMAND_EXECUTION]: A subprocess call is present in the test suite (tests/test_tiktok_top_ads_search.py) to facilitate automated testing of the script. This is a standard development practice and is not reachable during the skill's normal operation.- [CREDENTIALS_UNSAFE]: The skill handles authentication via the FREVANA_TOKEN environment variable. It implements robust safeguards, including a custom HTTP handler to prevent credentials from being sent to third-party domains during redirects and validation to ensure tokens do not contain control characters.- [INDIRECT_PROMPT_INJECTION]: The skill processes ad data from the TikTok Creative Center via the Frevana API. It mitigates potential data-driven risks by enforcing a 52 MiB response size limit and performing strict structural validation on the received JSON data.
Audit Metadata