ecommerce-tiktok-creator-analytics
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill operates by executing local Python scripts (
scripts/creator_detail.pyandscripts/creator_rank.py) to interface with external APIs. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from TikTok creator profiles (such as nicknames, handles, and bios) which could contain malicious instructions.
- Ingestion points: Data retrieved from external API endpoints via
scripts/creator_detail.pyandscripts/creator_rank.py. - Boundary markers: No specific delimiters or warnings are used when presenting or storing the retrieved data.
- Capability inventory: The skill allows script execution, file writing to the project directory, and network communication via a proxy.
- Sanitization: The skill does not perform validation or sanitization on the text fields returned by the external data source.
Audit Metadata