tiktok-ads

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill facilitates TikTok advertising management using structured tool calls and strictly validated parameters.
  • [SAFE]: All external links point to the vendor's official domain (hyperfx.ai) for integration management and documentation.
  • [SAFE]: The instructions include proactive safety measures, such as mandating that new ads are created in a disabled state (operation_status="DISABLE") to ensure human review before deployment.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles external data from the TikTok Marketing API (advertiser accounts, campaign metadata, performance reports). While this data is external, the skill uses it for reporting and parameter configuration rather than instruction execution.
  • Ingestion points: Tool outputs from tiktok_get_advertiser_accounts, tiktok_get_campaigns, and tiktok_report_integrated_get (SKILL.md).
  • Boundary markers: None explicitly defined in the prompt interpolation logic.
  • Capability inventory: File writes are not present; capabilities are limited to network API calls via the tiktok_marketing toolkit.
  • Sanitization: Standard API parameter validation is described throughout the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 03:05 PM
Security Audit — agent-trust-hub — tiktok-ads