Security audit
TikTok 数据助手 SocialDataX
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed, read-only TikTok data helper that uses a SocialDataX API key to fetch public content and creator information.
Install only if you intend to use SocialDataX for TikTok research and are comfortable providing SOCIALDATAX_API_KEY to the SocialDataX CLI/MCP service. Be aware that npx @latest can run newer package code in the future, and commands such as multi-page or all creator-post retrieval may consume API credits.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.