Publora Tiktok
PassAudited by ClawScan on May 10, 2026.
Overview
This instruction-only skill matches its stated purpose, but using it can create or schedule real TikTok posts through Publora with a Publora API key.
Use this only when you intend an agent to help publish or schedule TikTok videos through Publora. Provide the Publora API key only in a trusted context, verify the account/platform ID, caption, video file, and schedule before execution, and review the referenced core Publora skill if you plan to use it.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A mistaken or premature use could publish or schedule the wrong TikTok content.
The skill documents API calls that can create or schedule a TikTok post and upload a video. This is purpose-aligned, but it is a high-impact account action if run with the wrong content, platform ID, or schedule.
fetch('https://api.publora.com/api/v1/create-post', { method: 'POST' ... scheduledTime: '2026-03-20T18:00:00.000Z' }) ... requests.put(upload['uploadUrl'], ... data=f)Confirm the target TikTok platform ID, caption, video file, privacy expectations, and scheduled time before executing the create-post/upload workflow.
Anyone or any agent session with the key may be able to create or schedule Publora/TikTok posts within that key's permissions.
The workflow requires a Publora API key that can authorize posting actions. The registry metadata does not declare a primary credential, so users should notice this requirement in the instructions.
**Header:** `x-publora-key: sk_YOUR_KEY`
Use a limited-scope or revocable Publora key if available, avoid sharing it in untrusted contexts, and rotate it if it may have been exposed.
Safe use may depend partly on instructions or permissions from another skill that should be reviewed separately.
The skill points to another skill for related auth and scheduling guidance, but that separate artifact is not included in this review.
For auth, core scheduling, media upload, and workspace/webhook docs, see the `publora` core skill.
Review the `publora` core skill and verify Publora's official API documentation before relying on the combined workflow.