Product Differentiation Tiktok

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This appears to be a disclosed, local product-analysis skill; the main thing to check is the documented remote/global install and Python script execution.

This skill looks coherent for local TikTok Shop product strategy analysis. Before installing, verify the remote `nexscope-ai/eCommerce-Skills` source and be comfortable running the included Python script on any product, review, or sales data you provide.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing and using the skill may run local Python code to analyze product data.

Why it was flagged

The skill is used by executing an included Python script. This is clearly documented and central to the tool's purpose, but it is still local code execution that users should knowingly approve.

Skill content
python3 scripts/analyzer.py
Recommendation

Only run the script from a trusted installation source and review the provided code if your environment contains sensitive data.

What this means

A user could install code from a remote package/repository outside the registry metadata shown here.

Why it was flagged

The documentation points users to a remote/global install command. This is a normal setup pattern, but the registry metadata provided here has no homepage/source and no install spec, so users should verify the source before installing.

Skill content
npx skills add nexscope-ai/eCommerce-Skills --skill product-differentiation-tiktok -g
Recommendation

Verify the `nexscope-ai/eCommerce-Skills` source and confirm it matches the skill you intend to install before using the global install command.