linkfox-kalodata-tiktok-video
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements legitimate TikTok data analysis functionality by interacting with the vendor's own API gateway (
tool-gateway.linkfox.com). - [SAFE]: Data exfiltration analysis: The skill uses network operations only to communicate with its own API endpoints and a well-known feedback service (
skill-api.linkfox.com). Sensitive environment variables likeLINKFOX_AGENT_API_KEYare used appropriately for authentication headers. - [SAFE]: Command execution: The provided Python scripts (
kalodata_video_search.py,kalodata_video_detail.py,onboarding.py) execute standard web requests and local file system operations (logging and caching) within the project's workspace. There are no patterns of arbitrary command execution or shell injection. - [SAFE]: Persistence and Privilege Escalation: The skill does not attempt to modify system configuration, startup scripts, or acquire elevated privileges. File operations are scoped to a
linkfoxdirectory in the current workspace or standard temporary directories. - [SAFE]: Metadata and Injection: The skill metadata accurately describes its functionality. Indirect prompt injection surfaces are limited as the data processed is structured JSON from a dedicated data provider, with standard delimiters used in instructions.
Audit Metadata