v1.0.0

Tiktok Influencer Tracker

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:10 AM.

Analysis

The skill is a coherent TikTok creator-management guide, but users should notice that it allows Bash and may store business, shipment, and commission data.

GuidanceThis appears safe to review as an instruction-only creator-management skill. Before installing or using it, confirm whether it will create a local database or files, where creator and sales data will be stored, and whether Bash execution is actually needed.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityLowConfidenceMediumStatusNote

SKILL.md

allowed-tools: Bash

The skill permits shell access even though the provided artifacts are instruction-only and do not include an implementation or required binary.

User impactIf the agent tries to run local commands for this workflow, it could interact with the user's environment beyond simple text generation.

RecommendationOnly allow Bash use for clearly understood, user-approved local actions, and verify any actual creator-management command or database before using it.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Memory and Context Poisoning

SeverityMediumConfidenceHighStatusNote

SKILL.md

creator add <username>            # add creator to management database
- **Sample shipment info** — product sent, date shipped, tracking number
- **Commission data** — sales attributed to each creator

The skill is designed to maintain creator records and handle shipment, sales, and commission data, which may be sensitive business information if stored or reused.

User impactCreator relationship details, tracking numbers, sales attribution, and commission data could remain in a local tracker, database, or agent context if the workflow stores them.

RecommendationDecide where records will be stored, avoid entering unnecessary personal or financial details, and periodically remove outdated creator and shipment records.