Security audit
Security checks across malware telemetry and agentic risk
The skill has a coherent TikTok creator-data purpose, but it also includes account onboarding, token issuance, billing/payment flows, endpoint overrides, and broad local storage that users should review before installing.
Install only if you are comfortable with this skill sending TikTok creator tokens and LinkFox API keys to LinkFox services, storing raw API responses on disk, and potentially guiding users through LinkFox account signup and paid-plan purchase flows. Confirm the endpoint environment variables are trusted and avoid using the onboarding/payment commands unless the user explicitly asks for them.
method="POST",
)
try:
with urlopen(req, timeout=120) as response:
return json.loads(response.read().decode("utf-8"))
except HTTPError as e:
body = e.read().decode("utf-8") if e.fp else ""except RuntimeError as e:
return {"_error": str(e)}
try:
r = requests.post(url, json=body or {}, headers=headers, timeout=timeout)
return r.json()
except Exception as e:
body_text = ""headers["Content-Type"] = "application/json"
req = Request(url, method=method, data=body_bytes, headers=headers)
try:
with urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode())
except urllib.error.HTTPError as e:
status = e.codeVirusTotal findings are pending for this skill version.
No suspicious patterns detected.