tiktok-script
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of markdown-based instructions and reference files. No scripts, binaries, or active code components are included in the analyzed files.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user-provided concepts and goals to generate creative scripts (Step 1 in SKILL.md). While it does not implement specific sanitization or boundary markers for this input, its primary function is text generation, and it lacks dangerous capabilities like arbitrary command execution or network access, resulting in a low risk profile.
- [DATA_EXFILTRATION]: No patterns indicative of data exfiltration were found. The skill references an integration with 'WoopSocial' for media uploads and scheduling, which is described as a legitimate part of the post-production workflow.
- [COMMAND_EXECUTION]: No shell commands, system calls, or dynamic execution patterns (such as eval or subprocess) are present in the skill's instructions or metadata.
Audit Metadata