linkfox-echotik-list-video
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified during the analysis.
- [DATA_EXPOSURE_AND_EXFILTRATION]: All network operations are directed to the vendor's official domains (
linkfox.comandtool-gateway.linkfox.com). The skill correctly manages credentials by sourcing them from environment variables and stores session data in a dedicated workspace directory. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted TikTok video metadata, which is a potential surface for indirect injection.
- Ingestion points: TikTok API response data processed in
scripts/echotik_list_video.pyand displayed to the user. - Boundary markers: The skill instructions recommend truncating long descriptions for display.
- Capability inventory: Network access to vendor APIs and file writing to the project's data directory. No shell execution or dynamic code evaluation is performed on the ingested data.
- Sanitization: Data is retrieved and presented as metadata; no dangerous processing of untrusted strings was found.
Audit Metadata