tiktok-app-marketing
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface for untrusted data as it is designed to process competitor research gathered from the web (TikTok and App Store) to optimize marketing strategies.\n
- Ingestion points: Data from external research is stored in
competitor-research.jsonand processed by daily reporting scripts.\n - Boundary markers: The skill relies on the agent's interaction logic to scope and delimit research findings before they are utilized for strategy generation.\n
- Capability inventory: The skill is capable of generating photorealistic images, writing to the local filesystem, and posting content to social media platforms via API.\n
- Sanitization: Input text intended for image overlays is sanitized to remove emojis and non-standard characters that could interfere with the rendering engine.\n- [EXTERNAL_DOWNLOADS]: The skill interacts with established and trusted third-party services to perform image generation and conversion tracking.\n
- Image Generation: Communicates with OpenAI, Stability AI, and Replicate to generate slide images.\n
- Conversion Tracking: Integrates with the RevenueCat API to attribute marketing performance to revenue metrics.\n
- Vendor API: Leverages the Upload-Post API for multi-platform content distribution and platform-level analytics tracking.\n- [COMMAND_EXECUTION]: The skill executes local Node.js scripts to manage the marketing pipeline. It requires the installation of the
canvaspackage for image manipulation and provides the user with specific commands to install the necessary native system libraries for macOS, Linux, and Windows environments.
Audit Metadata