skills/nexscope-ai/nexscope-ecommerce-skills/ecommerce-tiktok-product-analytics-api/Gen Agent Trust Hub
ecommerce-tiktok-product-analytics-api
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill manages authentication via the
NEXSCOPE_API_KEYenvironment variable. It follows security best practices by instructing users to store secrets in the environment rather than hardcoding them or passing them as command-line arguments. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to an API endpoint determined by the
NEXSCOPE_PROXY_BASEenvironment variable. These requests are constrained to the specific path/api/v1/tools/research/kalodata/product/detailfor TikTok product analytics. - [DATA_EXPOSURE_AND_EXFILTRATION]: The implementation script writes session metadata, cache files, and API results to a local
nexscope/directory. This is used for standard persistence and session management within the agent's workspace. - [INDIRECT_PROMPT_INJECTION]: The skill processes data retrieved from the TikTok marketplace. It includes built-in safeguards, such as redacting authorization tokens and secrets before presenting summaries to the user, and separating retrieved facts from agent calculations to maintain data integrity.
Audit Metadata