Security audit
Security checks across malware telemetry and agentic risk
This is a coherent Virlo API integration for paid short-form video research; the main risk is user awareness around recurring monitors, autopilot, and API charges, not hidden or malicious behavior.
Install only if you are comfortable giving the skill access to your Virlo API key and sending research topics, creator handles, and video URLs to Virlo. Watch prepaid balance, recurring monitor cadence, and autonomy settings; ask the agent to confirm before creating recurring monitors, enabling autopilot, or deleting/pausing tracked resources.
1. Take keywords from the completed one-shot agent 2. `POST /v1/agents` with `is_recurring: true`, the same `intent`/keywords, and a `cadence` — free to create, then billed per run 3. The system automatically runs searches on the configured schedule. (No credits until the first run; recurring agents also self-optimize — see Autonomy.) ### Creator Growth Monitoring
- `GET /v1/agents?is_recurring=true|false&include_inactive=true` — List agents. - `GET /v1/agents/:id` — Config + autonomy state + latest run + merged latest analysis + `finalized` / `pending_jobs`. - `PUT /v1/agents/:id` — Update mutable config (not collection scope). - `DELETE /v1/agents/:id` — Soft delete (204). **Read (all Free):**
> ⚠️ **Deprecated — migrate to `/v1/agents`.** `POST /v1/orbit` and `POST /v1/comet` are frozen for back-compat and will be **removed on August 3, 2026**. Use `POST /v1/agents` (`is_recurring: false` = Orbit one-shot, `is_recurring: true` = Comet recurring). Existing `orbit_id`/`comet_id` values remain valid agent ids, and every read sub-path below also works verbatim under `/v1/agents/:id/…`. Do not build new integrations on these. - `POST /v1/orbit` — $0.50. → `POST /v1/agents` with `is_recurring: false`. Reads (all Free): `GET /v1/orbit/:orbit_id` (poll), `/videos`, `/slideshows`, `/ads`, `/creators/outliers`, `/sounds`, `/analysis/latest`, `/analysis/history`, `/trends/latest`, `/trends/history`; list `GET /v1/orbit`. - `POST /v1/comet` — $0.50 per run. → `POST /v1/agents` with `is_recurring: true` + `cadence`. Manage: `GET /v1/comet`, `GET/PUT/DELETE /v1/comet/:id`. Reads (all Free): same sub-paths as Orbit plus `/hashtags`, `/benchmarks`, `/affinity`, `/creators/:creator_id/similar` (all accept the same filters as their `/v1/agents/:id/…` equivalents). **Satellite (Creator Lookup)** — Deep-dive into any creator's profile and performance, with optional AI trend detection over their body of work.
- `GET /v1/tracking/creators/:id/posts/collect/:collection_id` — Free. Poll collection job status.
- `GET /v1/tracking/creators/:id/posting-cadence` — Free. Get posting frequency analytics (avg gap, posts per week/month, day-of-week stats).
- `PATCH /v1/tracking/creators/:id` — Free. Update status ("active" or "paused") or scrape_cadence.
- `DELETE /v1/tracking/creators/:id` — Free. Stop tracking (204, soft delete, data retained).
- `POST /v1/tracking/videos` — $0.25. Body: `{ "url": "video_url", "platform": "tiktok" }`. Optional: `scrape_cadence`, `tracking_account_id` (link to a tracked creator).
- `GET /v1/tracking/videos` — Free. List tracked videos. Params: page, limit, platform, search.
- `GET /v1/tracking/videos/:id` — Free. Get video details with latest metrics.- `GET /v1/tracking/videos/:id/report` — Free. Get latest AI analysis report (auto-generated each cycle). - `GET /v1/tracking/videos/:id/snapshots` — Free. Historical metric snapshots. Includes delta\_\* fields. - `PATCH /v1/tracking/videos/:id` — Free. Update status or scrape_cadence. - `DELETE /v1/tracking/videos/:id` — Free. Stop tracking (204). **Audience Demographics & Geography** — Engaged-audience profile (age, gender, country, city, language) for any tracked creator — read it as "who's showing up in the replies," derived from analyzing the creator's commenters rather than the raw follower base. (TikTok has a follower-list fallback when comments are sparse; see the `data_source` taxonomy below.) Snapshots are cached for 30 days; fresh collections are AI-driven and charged on dispatch only.
64/64 vendors flagged this skill as clean.
No suspicious patterns detected.