ClawHub
Back to skill

Security audit

Tiktok Video Publishing

Security checks for vulnerabilities and agentic risk

Overview

This skill openly helps configure TikTok video publishing through WoopSocial, and I found no hidden code, unrelated access, or deceptive behavior.

Before installing, be aware that this skill is meant to configure posts that may publish publicly on TikTok through WoopSocial. Use it only with the correct account, review privacy and disclosure settings before publishing, and verify paid-brand or AI-content disclosures are truthful.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.