Tiktok To Mealie
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears coherent and purpose-aligned, but it needs Mealie access and can create recipe entries in your Mealie account.
This looks safe to use if you are comfortable giving the agent access to your Mealie instance. Before installing, prepare a dedicated Mealie token if possible, verify the target Mealie URL, and consider asking the agent to confirm before importing uncertain TikTok recipes.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
When used, the skill can add recipes and images to your Mealie instance.
The skill is designed to take action through Mealie rather than only summarize content. This is purpose-aligned, but users should notice that invocation can create persistent entries and upload images.
If good enough, create the recipe in Mealie. Upload image if available. Verify the created recipe before returning the final link.
Use it only when you want the recipe imported, and ask for confirmation first if the TikTok link or extracted recipe quality is ambiguous.
Anyone using the configured token through the agent may be able to create, fetch, or update recipe data in the configured Mealie account.
A Mealie API token is expected for the stated purpose, but it is still account authority and is not reflected in the registry metadata as a required credential or environment variable.
This skill requires a Mealie base URL and API token... environment variables: `MEALIE_BASE_URL`, `MEALIE_API_TOKEN`... local secret files
Use a Mealie token with the least privileges available, store it securely, and confirm the configured Mealie URL is the intended destination.