ecommerce-tiktok-seller-detail
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network requests to an external API endpoint defined by the environment variable
NEXSCOPE_PROXY_BASE. This behavior is aligned with the skill's primary purpose of fetching analytics data. The scripts specifically target the path/api/v1/tools/research/echotik/sellerDetail, which is a vendor-owned resource. - [COMMAND_EXECUTION]: The skill includes a Python script
scripts/tiktok_seller_detail.pyintended for execution. Analysis of the script shows it performs standard tasks: environment variable retrieval for authentication, JSON parameter parsing, HTTP POST requests usingurllib.request, and file writing to a subdirectory within the current working directory for persistence/caching. No arbitrary command injection or dangerous system calls were detected. - [CREDENTIALS_UNSAFE]: The skill correctly uses environment variables (
NEXSCOPE_API_KEY) for authentication rather than hardcoding sensitive tokens. The documentation explicitly advises users on proper secret management.
Audit Metadata