ClawHub
Back to skill

Security audit

discovering-tiktok-creators-by-niche

Security checks for vulnerabilities and agentic risk

Overview

This skill transparently uses Apify TikTok scrapers to find creator profiles, with no hidden persistence or unrelated access found.

Install only if you are comfortable sending TikTok search terms, campaign criteria, and scraper results to Apify/Apidojo under your Apify account. Keep APIFY_TOKEN secret and avoid entering confidential campaign plans as search criteria unless that third-party processing is acceptable.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The trigger description is broad enough that the skill could activate on a wide range of influencer-marketing or creator-discovery requests without clearly signaling that it will use a third-party scraping service. Overbroad activation increases the chance of unintended invocation and unanticipated transmission of user-supplied search criteria to Apify.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill asks for niche, region, follower thresholds, and other campaign criteria, then sends those inputs and retrieves creator data via a third-party scraping provider, but it does not warn the user about that data transfer. This creates a transparency and privacy risk because users may disclose sensitive marketing plans or targeting criteria without informed consent.

External Transmission

Medium
Category
Data Exfiltration
Content
**If Apify MCP is not available:**
```bash
curl -X POST \
  "https://api.apify.com/v2/acts/apidojo~tiktok-scraper/runs?token=$APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
Confidence
94% confidence
Finding
This command sends user-derived search terms to an external Apify endpoint, which is a real data egress path to a third-party service. While expected for the skill's functionality, it is still security-relevant because the transfer occurs without built-in consent language, input minimization, or safeguards against sending sensitive campaign information.

External Transmission

Medium
Category
Data Exfiltration
Content
### Step 4: Fetch and Deduplicate Creators

```bash
curl "https://api.apify.com/v2/actor-runs/$RUN_ID/dataset/items?token=$APIFY_TOKEN"
```

From the results, extract unique `authorMeta.id` values. Deduplicate — same creator often appears across hashtags. Sort by `authorMeta.fans` (follower count).
Confidence
92% confidence
Finding
Fetching dataset items from Apify retrieves scraped creator records from a third-party service, reinforcing that creator data is being stored and processed externally. In this skill context, that is functionally necessary, but it remains a real exposure because users are not warned that search inputs and collected results reside with an external provider.

External Transmission

Medium
Category
Data Exfiltration
Content
### Step 4: Fetch and Deduplicate Creators

```bash
curl "https://api.apify.com/v2/actor-runs/$RUN_ID/dataset/items?token=$APIFY_TOKEN"
```

From the results, extract unique `authorMeta.id` values. Deduplicate — same creator often appears across hashtags. Sort by `authorMeta.fans` (follower count).
Confidence
92% confidence
Finding
Fetching dataset items from Apify retrieves scraped creator records from a third-party service, reinforcing that creator data is being stored and processed externally. In this skill context, that is functionally necessary, but it remains a real exposure because users are not warned that search inputs and collected results reside with an external provider.

Static analysis

No suspicious patterns detected.