Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Brand Protection Tiktok

v0.1.0

TikTok Shop brand protection toolkit. Detect unauthorized sellers, counterfeit products, and affiliate abuse. Includes TikTok IP Protection reporting, influe...

0· 174·0 current·0 all-time
byHenk Nie@phheng

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for phheng/brand-protection-tiktok.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Brand Protection Tiktok" (phheng/brand-protection-tiktok) from ClawHub.
Skill page: https://clawhub.ai/phheng/brand-protection-tiktok
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install brand-protection-tiktok

ClawHub CLI

Package manager switcher

npx clawhub@latest install brand-protection-tiktok
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The skill is advertised for 'TikTok Shop' but the included templates and code repeatedly reference Amazon concepts (ASINs, Brand Registry, brandregistry.amazon.com) and Amazon-specific workflows. There is no TikTok API integration, no TikTok endpoints, and no declared credentials for accessing TikTok Shop. This mismatch suggests either mislabeled scope or missing/incomplete implementation.
!
Instruction Scope
Runtime instructions are minimal (run python3 scripts) and do not explain how TikTok data is obtained or what inputs the scripts expect. The SKILL.md shows example JSON inputs but does not say where to provide them. Templates instruct operational activities (test buys, cease-and-desist) which are plausible, but the agent is given broad discretion without clear data-flow boundaries — e.g., no guidance on safe data sources or limits on automated reporting.
Install Mechanism
There is no install spec (instruction-only), which is lower risk from supply-chain downloads. However, the package includes two Python scripts bundled with the skill; running them will execute local code. No external downloads or suspicious install URLs were present in the provided files, but users should still review the scripts before execution.
Credentials
The skill does not request environment variables, credentials, or config paths. That is proportionate given its stated functionality. Note: the scripts generate complaint templates (including contact emails) but do not declare any need for secrets — any network or credential usage would be visible only in the code (which should be inspected).
Persistence & Privilege
The skill is not marked always:true and does not request persistent privileges. It is user-invocable and can be run manually; autonomous invocation is allowed by default but not by itself a red flag here.
What to consider before installing
Do not assume this is a ready-to-run TikTok integration. Before installing or executing: (1) Confirm with the publisher whether this is intended for TikTok — ask how TikTok Shop data is obtained and whether any scraping or API access is required. (2) Inspect the included Python files for any network requests or credential usage (HTTP requests, sockets, or hidden endpoints). (3) Run the scripts in an isolated environment (sandbox/VM) after review. (4) If you plan to use automated reporting or 'test buys', verify legal/compliance implications and avoid exposing your primary accounts/credentials. If the author provides a clear TikTok API implementation (endpoints, required env vars, and privacy policy) and/or updates templates to target TikTok rather than Amazon, the coherence and risk profile would improve.

Like a lobster shell, security has layers — review code before you run it.

latestvk9745dgc0s4hmyav4n8kh6cq75839h60
174downloads
0stars
1versions
Updated 11h ago
v0.1.0
MIT-0

Brand Protection — TikTok Shop 🛡️

Protect your brand from unauthorized sellers and counterfeit products on TikTok Shop.

Installation

npx skills add nexscope-ai/eCommerce-Skills --skill brand-protection-tiktok -g

Features

  • Unauthorized Seller Detection — Find sellers without authorization
  • Price Monitoring — MAP violation alerts
  • Counterfeit Signals — Review-based fake detection
  • Affiliate Abuse — Unauthorized influencer promotion
  • TikTok IP Protection — Official reporting templates
  • Content Takedown — Video/post removal requests

TikTok-Specific Detection

DimensionMethodRisk Level
Unauthorized SellersShop monitoring🔴 High
Price ViolationsBelow MAP detection🔴 High
CounterfeitReview/comment analysis🔴 High
Affiliate AbuseCreator content scan⚠️ Medium

Risk Levels

LevelDescriptionAction
🔴 HighActive infringementReport within 24h
⚠️ MediumPotential concernInvestigate further
✅ LowNormal activityContinue monitoring

Input Configuration

{
  "brand_name": "YourBrand",
  "tiktok_shop_id": "your_shop_id",
  "trademark_number": "US12345678",
  "authorized_affiliates": ["creator_id_1", "creator_id_2"],
  "min_price": 29.99
}

Usage

Detection

python3 scripts/detector.py

Generate Complaint Templates

# TikTok IP Protection report
python3 scripts/templates.py ip-report

# Seller complaint
python3 scripts/templates.py seller-complaint

# Content takedown
python3 scripts/templates.py content-takedown

Output Example

🛡️ TikTok Shop Brand Protection Report

Brand: YourBrand
Shops Monitored: 5
Analysis Date: 2024-01-15

━━━━━━━━━━━━━━━━━━━━━━━━

🔴 HIGH RISK ALERTS

Shop: fake_seller_123
├── Selling counterfeit products
├── Price: $9.99 (MAP: $29.99)
└── Action: File TikTok IP report

━━━━━━━━━━━━━━━━━━━━━━━━

⚠️ AFFILIATE ABUSE

Creator: @unauthorized_creator
├── Promoting without authorization
├── Commission rate: 25%
└── Action: Contact creator / Report

TikTok IP Protection

TikTok's Intellectual Property Protection program allows brand owners to:

  • Report counterfeit listings
  • Remove unauthorized content
  • Block infringing sellers

Action Workflow

Monitor TikTok Shop
      ↓
Detect Violation
      ↓
Collect Evidence
      ↓
File IP Report
      ↓
Track Removal

Part of Nexscope AI — AI tools for e-commerce sellers.

Comments

Loading comments...