tiktok-warmup
Warn
Audited by Snyk on May 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's runtime workflows (e.g., browserWarmupRef.md and executeWarmupsRef.md) explicitly direct the agent to navigate tiktok.com, read/interpret FYP/search results and other user-generated TikTok content and use those observations to make decisions (warmup mode, search-terms, session actions), so it clearly ingests untrusted third-party web content that could carry indirect prompt-injection payloads.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata