tiktok-video-downloader

Warn

Audited by Socket on Jul 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose matches its behavior, but it depends entirely on a non-official third-party service that receives both the user’s TikTok URLs and a RedFox API key. There is no malware-like installer or hidden execution, yet the proxy-style data flow and third-party credential routing make the skill medium risk rather than benign.

Confidence: 85%Severity: 57%
Audit Metadata
Analyzed At
Jul 24, 2026, 04:39 PM
Package URL
pkg:socket/skills-sh/redfox-data%2Fredfox-community%2Ftiktok-video-downloader%2F@7d195b76b3a1f444c8a15ccad1267510dddd2774b33213ee560be552b708e48d
Security Audit — socket — tiktok-video-downloader