Skill Tiktok Ads Video

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This appears to be a benign local video-captioning skill, with minor notes about runtime Python dependencies and documentation that overstates some options.

This skill looks appropriate for local video caption rendering. Before installing, use it in an isolated folder, provide explicit input/output paths, consider pinning dependencies, and verify the available command-line options because some documented features may not match the included script.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI04: Agentic Supply Chain Vulnerabilities
Low
What this means

The video tool may install or use newer package versions than the author originally tested.

Why it was flagged

The script depends on external Python packages with broad or unpinned version constraints, so runtime behavior can change if package versions change.

Skill content
dependencies = ["moviepy>=2.0", "pillow>=10.0", "numpy"]
Recommendation

Run it in an isolated project environment and consider pinning or locking dependency versions before repeated production use.

#
ASI09: Human-Agent Trust Exploitation
Info
What this means

Some documented commands may fail or not behave as described, especially audio mixing and legacy captions usage.

Why it was flagged

The documentation appears to describe options that the included script does not accept, which may mislead users about supported functionality.

Skill content
SKILL.md advertises `--audio music.mp3` and `--captions scripts/example_captions.json`; the visible parser defines `--video`, `--output`, `--product`, and `--style` before `args = ap.parse_args()`.
Recommendation

Check the script's actual `--help` output and test on disposable copies before relying on the documented optional features.