tiktok-home-downloader
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill manages its API secrets using standard environment variables (REDFOX_API_KEY) and local configuration files, which is a secure and recommended practice for agent skills.
- [COMMAND_EXECUTION]: The skill uses a transparent Python script to process user requests and manage downloads. The script logic is strictly limited to interacting with the TikTok and RedFox APIs.
- [EXTERNAL_DOWNLOADS]: The skill downloads media content from TikTok's content delivery networks and communicates with redfox.hk for link resolution. These external interactions are necessary for the skill's primary purpose and do not target untrusted or suspicious sources.
- [DATA_EXFILTRATION]: No evidence of unauthorized data exfiltration was found. The skill only handles data related to TikTok profiles and download links provided by the user.
Audit Metadata