Security audit

Tiktok Short Video

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only TikTok short-video marketing guide with no executable behavior, credential access, persistence, or hidden data flow.

Install this if you want Chinese-language guidance for TikTok product-video creation and growth tactics. Users who need another language should confirm the agent can translate or adapt the guidance, and should independently verify platform policy, advertising costs, and best posting practices because marketing advice can become outdated.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (6)

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: This markdown file contains user-facing instructional content exclusively in Chinese, including the description and all guidance sections. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified, which is not present here.

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: This markdown file is entirely written as a Chinese-only guide, including all headings, examples, and instructions, with no indication that language choice is optional. Under the policy provided, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is clearly documented and justified, which it is not here.

Natural-Language Policy Violations

Medium

Confidence: 92% confidence
Finding: The entire skill content is written in Chinese, while later sections embed English platform- and locale-specific tags and market timing guidance, but there is no note that the skill is intended only for Chinese-speaking users or that alternative languages are supported. Under the policy, a language or locale constraint should be explicitly offered as a choice or clearly justified.

Natural-Language Policy Violations

Low

Confidence: 89% confidence
Finding: This markdown file contains user-facing instructional content exclusively in Chinese, and there is no indication that the skill is intentionally limited to Chinese-speaking users or a specific locale. Per the policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Natural-Language Policy Violations

Low

Confidence: 93% confidence
Finding: This markdown file presents all instructional content in Chinese and does not indicate that the user can choose another language. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale restriction is explicitly justified.

Natural-Language Policy Violations

Low

Confidence: 82% confidence
Finding: This markdown file is entirely presented in Chinese, beginning with a Chinese-only title, and does not indicate that language selection is optional or that the skill is intentionally region-specific. Under the language/locale policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Static analysis

No suspicious patterns detected.