tiktok-shop-integration
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard instructional content for TikTok Shop integration. No malicious behavior, obfuscation, or unauthorized data access was detected. All remote references target official TikTok services.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a webhook handler that ingests data from external TikTok events. This creates a standard ingestion surface for untrusted data. 1. Ingestion points: Webhook body in handleTikTokShopWebhook (SKILL.md). 2. Boundary markers: Absent in the basic snippet, but required in the evaluation criteria for signature verification. 3. Capability inventory: Network requests via tiktokShopRequest and database synchronization. 4. Sanitization: The syncProductToTikTokShop function demonstrates basic sanitization by stripping HTML tags from descriptions.
Audit Metadata