ClawHub
Back to skill

Security audit

tiktok-research-kit

Security checks for vulnerabilities and agentic risk

Overview

The skill mostly matches its TikTok research purpose, but it under-explains a sensitive option that can give a local tool access to browser login cookies.

Install only if you are comfortable using yt-dlp locally for TikTok research. Avoid the browser-cookie option unless you understand that cookies can grant account access; use a dedicated browser profile or minimal cookie export, and do not run it with cookies from unrelated accounts or profiles. Prefer pinning yt-dlp and running it in an isolated environment.

A.I.G

Vulnerability Patterns
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:19
Finding

Unpinned Third-Party Executable Dependency

Content
View full analysis
Remediation
View remediation

T05 · Unauthorized Access and Privilege Escalation

Warning
Location
SKILL.md:140
Finding

Broad Access to Browser Cookie Storage

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

YARA rule 'info_stealer': Information stealer patterns (credential harvesting, browser data theft) [malware]

High
Category
YARA Match
Confidence
88% confidence
Finding

Recommending --cookies-from-browser chrome tells the operator to extract authenticated browser cookies and feed them into a command-line tool. While this can be legitimate for accessing user-authorized content, it overlaps with credential/session-token harvesting patterns and can expose sensitive session data if used carelessly, especially in an agent skill that may encourage users to run commands verbatim.

Content

Scanner excerpt · SKILL.md (reported line 140)May include surrounding context.

md
**yt-dlp not found:** Print install commands
- **Video removed:** "This video has been removed by the creator or TikTok."
- **Private account:** "This account is private."
- **Region restricted:** "This video is not available in your region."
- **Short link:** yt-dlp auto-resolves vm.tiktok.com links
- **Rate limited:** "TikTok rate limit reached. Wait and retry."

## Notes

- TikTok may require cookies for some content: `--cookies-from-browser chrome`
- Short links (vm.tiktok.com) are automatically resolved by yt-dlp.
- Sound/music metadata is key for TikTok content analysis — trending sounds drive discovery.
- Comments extraction may not work on all videos due to TikTok API restrictions.

## About

TikTok Research Kit is an open-source project by [SnapVee](https://snapvee.com).

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The skill instructs collection of comments, profile feeds, and engagement data about third parties without any privacy notice, minimization guidance, or use restrictions. In a research context this can normalize bulk collection of personal or quasi-personal data and increase risk of privacy misuse, profiling, or noncompliant downstream handling.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Low
Category
Not specified by scanner
Confidence
81% confidence
Finding

Lines L124-L127 state that the skill does not handle downloading and is limited to content extraction and analysis. However, the same section explicitly directs users to an online tool, snapvee.com, for downloading, which conflicts with the stated non-download focus in the workflow guidance.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.