tiktok-ads-operator
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data retrieved from the TikTok Ads API (such as campaign insights and performance metrics) via tools like
pull_tiktok_ads_performanceandtiktok_ads_get_insightsinSKILL.md. - Ingestion points: External data from TikTok API ingested through MCP tools.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to disregard instructions potentially embedded in the TikTok data.
- Capability inventory: The skill has the capability to modify ad group configurations, update campaign budgets, and pause campaigns.
- Sanitization: The instructions do not specify any validation or sanitization steps for the data received from the TikTok API.
Audit Metadata