Tiktok Android

• Analyzed: May 14, 2026, 3:22 AM
• Findings: 1
• Version: 1.0.0
• Hash: b452e8ec1de02f9fd1bd4b44c2523e810e4ba0d5ed1df1fcd533d3a9dafd8b23
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill is designed to automate TikTok engagement on Android devices using ADB. All observed behaviors, including ADB command execution (tap, type, screenshot, app control), interaction with AI APIs (Anthropic, OpenAI, OpenRouter) for comment generation, and local file operations for configuration and screenshots, are directly aligned with its stated purpose. The skill handles API keys securely in a `.env` file and includes basic sanitization for user-provided text. There is no evidence of data exfiltration beyond necessary API calls, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the OpenClaw agent in the `SKILL.md` or `README.md` files. The hardcoded path in `run_complete_session.py` and `run_full_campaign.py` is a minor portability issue, not a security vulnerability.