tiktok-app-marketing Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower

Source:

SHA-256:

tiktok-app-marketing is an AI agent skill, created by olliewazza and published at openclaw/skills. ClawSecure audited tiktok-app-marketing across 14 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 44 findings concentrate in Data Exfiltration, Policy Violation and Permissions Manifest, including Only 48% of skill content could be analyzed. 7 of 14 files… and Suspicious Pattern: fs.readFileSync(. 30 were rated high or critical severity.

Is tiktok-app-marketing safe?

ClawSecure audited tiktok-app-marketing and assigned a security score of 0/100 (High Risk), identifying 44 findings across Data Exfiltration and Policy Violation. Review the findings below before installing.

What did ClawSecure find in tiktok-app-marketing?

ClawSecure identified 44 findings in tiktok-app-marketing, concentrated in Data Exfiltration, Policy Violation and Permissions Manifest. 30 were rated high or critical severity. The most severe include Only 48% of skill content could be analyzed. 7 of 14 files… and Suspicious Pattern: fs.readFileSync(.

How was tiktok-app-marketing audited?

ClawSecure ran tiktok-app-marketing through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 14 files from openclaw/skills.

What does a score of 0 mean?

ClawSecure assigned tiktok-app-marketing a security score of 0/100, placing it in the High Risk range. This is driven by 44 findings led by Data Exfiltration that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for tiktok-app-marketing

ClawSecure detected 44 security findings in tiktok-app-marketing, spanning Data Exfiltration, Policy Violation, Permissions Manifest and ReDoS.

high · Only 48% of skill content could be analyzed. 7 of 14 files…. Policy Violation finding.
high · Suspicious Pattern: fs.readFileSync(. Data Exfiltration finding detected in scripts/add-text-overlay.js:43.
high · Suspicious Pattern: fs.writeFileSync(. Data Exfiltration finding detected in scripts/add-text-overlay.js:134.
high · Suspicious Pattern: fs.readFileSync(. Data Exfiltration finding detected in scripts/check-analytics.js:45.
high · Suspicious Pattern: fs.writeFileSync(. Data Exfiltration finding detected in scripts/check-analytics.js:210.
high · Suspicious Pattern: fs.readFileSync(. Data Exfiltration finding detected in scripts/competitor-research.js:29.
high · Suspicious Pattern: fs.writeFileSync(. Data Exfiltration finding detected in scripts/competitor-research.js:33.
high · Suspicious Pattern: fs.readFileSync(. Data Exfiltration finding detected in scripts/daily-report.js:40.
high · Suspicious Pattern: fs.readFileSync(. Data Exfiltration finding detected in scripts/daily-report.js:104.
high · Suspicious Pattern: fs.readFileSync(. Data Exfiltration finding detected in scripts/daily-report.js:113.
high · Suspicious Pattern: fs.writeFileSync(. Data Exfiltration finding detected in scripts/daily-report.js:120.
high · Suspicious Pattern: fs.readFileSync(. Data Exfiltration finding detected in scripts/daily-report.js:196.

Showing the 12 highest-severity of 44 findings. The full interactive list appears below.

3-Layer Audit Protocol

Security Recommendations for tiktok-app-marketing

Audit external network connections

tiktok-app-marketing sends data to external endpoints. Confirm each destination is expected and authorized, and remove any callback that exfiltrates data. ClawSecure monitors for known exfiltration and C2 endpoints.

Resolve policy violations

tiktok-app-marketing trips ClawSecure policy checks. Review each flagged pattern against your security policy and remediate or document an accepted exception before production use.

Add a config.json permissions manifest

A config.json file declares what an agent component can access: file system, network, shell execution and more. Without it, users have no visibility into what the component can do before installing. This is the single most impactful security improvement for any AI agent skill.

Related Security Research

ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→

Related AI Agent Security Audits

openclaw-master-skillsScore 0/100 openclaw-master-skillsScore 0/100 clawsec-suiteScore 0/100 yahoo-finance-m16opScore 0/100 yahoo-financeScore 0/100

Scanned on March 19, 2026. tiktok-app-marketing is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan