linkfox-echotik-list-video-rank
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and displays TikTok video metadata, such as descriptions and creator names, which originate from an external source and could potentially harbor malicious instructions.
- Ingestion points: TikTok video data fetched in
scripts/echotik_list_video_rank.py. - Boundary markers: Ingested data is presented without specific delimiters or isolation instructions.
- Capability inventory: The skill scripts can perform network requests to vendor APIs and write data to the local session directory.
- Sanitization: No content sanitization is applied to the retrieved metadata before it is presented to the user.
- [EXTERNAL_DOWNLOADS]: The skill's onboarding utility identifies optional dependencies for payment and account management.
- Evidence:
scripts/onboarding.pyreferencesrequests,qrcode, andpillow. These are standard, well-known libraries from the official Python Package Index (PyPI).
Audit Metadata