tiktok-photo-mode
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for generating social media content and publishing configurations. No malicious patterns such as credential exfiltration, remote code execution, or prompt injection were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it ingests data from external sources such as
brand-profileandgoals-and-kpisto generate social media plans and API configurations. However, this is the primary intended functionality of the skill and does not involve executing untrusted code or exposing sensitive system resources. - Ingestion points: Reads content from
brand-profileandgoals-and-kpisreferences. - Boundary markers: None explicitly defined in the provided markdown files.
- Capability inventory: Generates slide plans, overlay copy, and WoopSocial API configurations (
postType=PHOTO,privacyLevel, etc.). - Sanitization: None explicitly defined; relies on the agent's internal safety filters.
Audit Metadata