tiktok-shop-video
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill instructions are focused on legitimate content creation and marketing compliance for TikTok Shop. No malicious patterns such as credential harvesting, exfiltration, or persistence mechanisms were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external product links, which represents an indirect prompt injection attack surface. 1. Ingestion points: Product links and external product descriptions; 2. Boundary markers: Absent; 3. Capability inventory: curl, ffmpeg, Read, Write, Edit; 4. Sanitization: Absent. The risk remains safe as the impact is limited to the generation of markdown scripts and shot lists.
- [EXTERNAL_DOWNLOADS]: The skill references resources and tools such as mcp.varg.ai and the varg:estimate_cost tool. These are recognized as vendor-owned resources for the author vargHQ and are consistent with the skill's intended functionality for AI video production.
Audit Metadata