Product Differentiation Tiktok
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This appears to be a disclosed, local product-analysis skill; the main thing to check is the documented remote/global install and Python script execution.
This skill looks coherent for local TikTok Shop product strategy analysis. Before installing, verify the remote `nexscope-ai/eCommerce-Skills` source and be comfortable running the included Python script on any product, review, or sales data you provide.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing and using the skill may run local Python code to analyze product data.
The skill is used by executing an included Python script. This is clearly documented and central to the tool's purpose, but it is still local code execution that users should knowingly approve.
python3 scripts/analyzer.py
Only run the script from a trusted installation source and review the provided code if your environment contains sensitive data.
A user could install code from a remote package/repository outside the registry metadata shown here.
The documentation points users to a remote/global install command. This is a normal setup pattern, but the registry metadata provided here has no homepage/source and no install spec, so users should verify the source before installing.
npx skills add nexscope-ai/eCommerce-Skills --skill product-differentiation-tiktok -g
Verify the `nexscope-ai/eCommerce-Skills` source and confirm it matches the skill you intend to install before using the global install command.
