TikTok B2B 引流台词生成器

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only TikTok script generator appears benign, but users should set their own contact URL because it defaults to a prefilled website.

This skill is a simple prompt-based script generator with no code or permissions. Before using its output publicly, make sure the contact_url is your intended website and verify that any product, factory, certification, or market claims are accurate.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI09: Human-Agent Trust Exploitation

What this means

A user could accidentally create marketing copy that sends TikTok viewers to the default website instead of the user's own business site.

Why it was flagged

If the user does not provide a contact URL, generated promotional scripts will direct viewers to this prefilled website.

Skill content

"contact_url": { ... "description": "服务联系网址，用于引导客户访问", ... "default": "http://www.doumaotong.com" }

Recommendation

Set the contact_url input explicitly before using generated scripts in public-facing videos.