tiktok

SUSPICIOUS: The skill is internally coherent for TikTok data access via TikHub and does not contain obvious malware or dangerous install behavior, but it routes all activity and the API key through an unofficial third-party intermediary rather than official TikTok APIs. Risk is moderate due to credential forwarding, third-party data flow, and suggested handoff to other skills, not due to payload execution or overt exfiltration.