tiktok-video-downloader
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script (
downloader.py) to process TikTok links provided by the user. - [EXTERNAL_DOWNLOADS]: The skill communicates with an external API at
redfox.hkto retrieve video information and download links, which is the core intended functionality. - [CREDENTIALS_UNSAFE]: The skill utilizes a
REDFOX_API_KEYfor service authentication and provides a mechanism to save it to a local configuration file (~/.qoder/apis/redfox.json) using secure file permissions (0600). - [DATA_EXFILTRATION]: User-supplied TikTok URLs are sent to the vendor's API for processing. This transmission is necessary for the skill's operation and is clearly documented in the README.
Audit Metadata