tiktok-topic-aweme-list

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow queries a TikTok topic works API (topicAwemeList) and processes user-generated video content and summaries returned in the API response.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill makes API calls to an external third-party service at redfox.hk at runtime, which constitutes an operational dependency with common/reputable unofficial provenance.