TikTok视频审核

• Analyzed: May 10, 2026, 6:28 AM
• Findings: 1
• Version: 1.1.0
• Hash: 5fa8dc792ea83a953d0b9b207e98646f44f08b0230c1f0097d7bbc6332153c46
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle automates TikTok video auditing using yt-dlp, moviepy, and an external LLM. It is classified as suspicious because scripts/tiktok_audit.py contains a hardcoded API key (sk-0zy1...) and uses subprocess to execute system commands (curl and yt-dlp) with user-provided URLs, which presents an argument injection risk. Additionally, the script uses a hardcoded local developer path (/Users/apple/...) and sends data to an external API endpoint (api.lingyaai.cn).