Profit Margin Calculator Tiktok

• Outcome: Review
• Latest audit: Sep 14, 2026 · 11:00 PM UTC
• Version: 0.1.0

Overview

The skill is advertised as a TikTok Shop profit calculator, but the shipped calculator is Amazon/FBA-oriented, so users could get misleading business guidance.

Do not rely on this skill for TikTok Shop pricing decisions unless the publisher fixes the implementation or clearly re-scopes it as an Amazon/FBA calculator. If installing anyway, pin and verify the installer package and avoid global installation where possible.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:15

Finding

Unpinned npm CLI Executed During Skill Installation

Content

View full analysis

Vulnerability Details

File Location: SKILL.md:15
Vulnerability Type: Unpinned executable third-party dependency
Risk Level: Medium

Vulnerable Code Snippet:

bash

npx skills add nexscope-ai/eCommerce-Skills --skill profit-margin-calculator-tiktok -g

Technical Analysis

The documented installation command invokes the skills npm package through npx without specifying an exact package version or verifying package integrity. If the package is not already available locally, npx can retrieve and execute the version currently resolved by the configured npm registry.

Consequently, the code executed during installation is not immutable and may differ from the code reviewed at the time this skill was published. A compromised package, compromised maintainer account, registry substitution, dependency-chain compromise, or unexpected future package release could cause arbitrary code to execute during installation.

The -g argument also requests global installation of the skill through the invoked CLI. Although this does not inherently grant administrator privileges, it broadens the persistence and availability of any installed content within the user's skill environment.

Attack Path

1. An attacker compromises the npm package resolved as skills, one of its transitive dependencies, or its publishing account.
2. The attacker publishes a malicious version containing installation-time or runtime code.
3. A user follows the documented command without pinning a known-good version.
4. npx resolves, downloads, and executes the attacker-controlled package.
5. The malicious package executes with the permissions of the user running the command.
6. It may read or modify any files accessible to that user, access inherited environment variables, alter the user's development environment, or install malicious skill content in the global skill scope.

Impact Assessment

Successful exploitation can p ...[truncated 560 chars]

Remediation

View remediation

Remediation Suggestions

1. Pin the executable package to a specific, reviewed version, for example:

   bash

   npx --yes skills@<audited-version> add nexscope-ai/eCommerce-Skills --skill profit-margin-calculator-tiktok -g
   

2. Publish and document the expected package publisher, registry, version, and integrity digest.

3. Prefer a lockfile-backed local installation over dynamically executing the latest registry version.

4. Review the pinned package and its complete transitive dependency tree before recommending it.

5. Avoid global installation unless global availability is required. Prefer a project-local or otherwise isolated skill installation.

6. Run installation with a non-privileged account and in a constrained environment that does not expose unrelated credentials or sensitive environment variables.

7. Add automated dependency monitoring and require explicit security review before updating the pinned version.

SkillSpector

Vulnerability Patterns

• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence

Finding

A description-behavior mismatch is dangerous because users may trust the skill to perform TikTok Shop-specific margin calculations while the underlying implementation reportedly uses Amazon-oriented fee logic and undeclared features. That can silently produce incorrect financial outputs, bad pricing decisions, or misuse in workflows that assume platform-specific accuracy; the risk is heightened because this is a commerce calculator where small model/logic differences directly affect business decisions.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

High

• Category: Not specified by scanner
• Confidence: 99% confidence

Finding

The skill metadata says this is a TikTok Shop profit margin calculator, but the implementation is explicitly for Amazon/FBA, including Amazon referral fee tables, FBA fulfillment/storage fees, and Amazon-branded reporting. This mismatch can cause sellers to make materially wrong pricing and profitability decisions because fee structures, return behavior, and platform economics differ between TikTok Shop and Amazon.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 70% confidence

Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium

• Category: Not specified by scanner
• Confidence: 98% confidence

Finding

The module documentation advertises an Amazon profit calculator despite the skill being presented as a TikTok Shop tool. Misleading inline documentation increases the risk that users and downstream agents trust the wrong business logic, leading to silent misuse rather than an obvious runtime failure.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

Comments and user-facing strings refer to Amazon-specific concepts such as referral fees and FBA tiers, reinforcing a platform mismatch throughout the skill. In this context, the danger is not code execution but deceptive or incorrect financial guidance to TikTok Shop sellers, which can lead to underpricing, losses, or bad inventory decisions.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.