TikTok Influencer Marketing
v1.0.0Plan and manage TikTok influencer campaigns for e-commerce, including creator discovery, negotiation, content strategy, ROI tracking, and platform guidance.
⭐ 0· 51·0 current·0 all-time
bynexscope-ai@nexscope
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, and SKILL.md capabilities align: creator discovery, outreach templates, campaign briefs, ROI tracking and platform guidance are coherent with an influencer-marketing skill. The skill does not request unrelated resources or permissions.
Instruction Scope
SKILL.md contains only marketing-related guidance and example prompts. It does not instruct the agent to read local files, environment variables, or to exfiltrate data to third-party endpoints beyond the described marketing workflows.
Install Mechanism
Registry metadata has no formal install spec and no code files are bundled (lowest risk). However, SKILL.md includes an 'npx skills add nexscope/tiktok-influencer-marketing' command — that would pull and execute an npm package if run. This is an optional instruction in the README but could fetch arbitrary code if executed; verify the package/source before running.
Credentials
No required environment variables, credentials, or config paths are declared or referenced in SKILL.md. The skill does not ask for secrets, which is proportionate for its stated functionality.
Persistence & Privilege
Skill is not always-enabled and does not request elevated or persistent system privileges. disable-model-invocation is false (normal), meaning the agent could invoke the skill autonomously — this is the platform default and not a specific red flag here.
Assessment
This skill is instruction-only and appears coherent for TikTok influencer campaign planning. It does not request credentials or access to your system. Two practical precautions before you install or run anything mentioned in the README: (1) SKILL.md suggests an npx install — running npx will download and execute code from the npm registry, so only run it if you trust the publisher (the README claims 'Nexscope' — verify the npm package and its source repository before executing). (2) The skill's registry entry lacks a homepage and lists an unknown source; if you plan to use the suggested install, check the package code or the publisher's site (e.g., nexscope.ai) to confirm legitimacy. If you do not intend to run the npx command, using the skill as an instruction-only guide presents low risk.Like a lobster shell, security has layers — review code before you run it.
latestvk971q8t4hh686k2x6javqztrkx841y5e
License
MIT-0
Free to use, modify, and redistribute. No attribution required.