tiktok-live-cart-automation

• Outcome: Review
• Latest audit: May 29, 2026 at 9:34 PM UTC
• Version:
  1.0.0

Overview

This skill is openly for TikTok shopping automation, but it can act in a logged-in shopping account without enough built-in user controls.

Review before installing. Use a separate TikTok/browser profile, keep the browser visible, avoid saved payment methods, and set your own product, quantity, and price limits outside the skill. The code appears to be mostly simulated, but the documented intended use is under-scoped shopping automation in a logged-in account.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 93% confidence
• Finding: The skill advertises shell execution plus file read/write behavior in its usage examples and workflow, but declares no permissions. That mismatch is a real security issue because users and enforcement systems cannot accurately assess or constrain what the skill can do before running it. In this context, the automation interacts with a logged-in shopping session and writes intermediate files, so undeclared capabilities increase the risk of unintended local actions, data exposure, or misuse of an authenticated browser state.

VirusTotal

65/65 vendors flagged this skill as clean.