📦

tiktok-api

Name: tiktok-api
Author: fetcher-sh

Revisión del contenido r1 Riesgo medio 📁 Acceso al sistema de archivos🌐 Acceso a red🔑 Variables de entorno⚙️ Comandos externos

Explore TikTok Data with Fetcher.sh

Official TikTok access can require application review and does not fit quick, read-only research. This skill guides paid Fetcher.sh requests for posts, profiles, comments, and discovery feeds.

Compatible con: Claude Codex Code(CC)

📊 67 Adecuado

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "tiktok-api" from https://skillstore.io/skills/fetcher-sh-tiktok-api.md and its manifest at https://skillstore.io/api/skills/fetcher-sh-tiktok-api/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/fetcher-sh-tiktok-api.md Manifest firmado GET /api/skills/fetcher-sh-tiktok-api/manifest Lockfile firmado GET /api/skills/fetcher-sh-tiktok-api/lockfile

Pruébalo

Usando "tiktok-api". Find the most-liked AI agent posts from this month.

Resultado esperado:

A ranked summary of matching posts with creator names, engagement totals, publication dates, and links.
A short synthesis of repeated topics and notable outliers.

Usando "tiktok-api". Review the profile and recent posts for a specified creator.

Resultado esperado:

A profile overview followed by recent post themes, engagement observations, and the identifiers needed for deeper queries.

Usando "tiktok-api". Create a weekly hashtag monitoring workflow with a $2 budget.

Resultado esperado:

A bounded polling plan with endpoint order, cursor storage, deduplication rules, cost estimates, and a concise weekly report format.

Auditoría de seguridad

Riesgo medio

v1 • 14/8/2026 Abrir el informe versionado

All 154 static alerts are false positives caused by Markdown links, code formatting, redacted placeholders, and documented calls to expected endpoints. No prompt injection, hidden execution, unrelated destination, or real embedded secret was found. Paid third-party requests and automatic x402 settlement still create a spending risk that users should control.

Archivos escaneados

664

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Medio

SKILL.md:73-75 SKILL.md:195-208

Paid Requests Can Settle Before Data Delivery

The skill supports paid calls and automatic x402 retries. It states that settlement precedes delivery and upstream failures receive no refunds.

The payment behavior and no-refund condition are explicitly documented, including automatic signing and retries.

Factores de riesgo

📁 Acceso al sistema de archivos (9)

references/endpoints.md:10 references/faq.md:19 references/scenarios.md:16 SKILL.md:64 SKILL.md:198 SKILL.md:217 SKILL.md:218 SKILL.md:219 SKILL.md:223

🌐 Acceso a red (41)

🔑 Variables de entorno (33)

⚙️ Comandos externos (50)

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/fetcher-sh-tiktok-api/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/fetcher-sh-tiktok-api/security.svg)](https://skillstore.io/skills/fetcher-sh-tiktok-api?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/fetcher-sh-tiktok-api?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/fetcher-sh-tiktok-api/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/fetcher-sh-tiktok-api.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

fetcher-sh. (2026). tiktok-api security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/fetcher-sh-tiktok-api/audits/1

Cita BibTeX

@techreport{fetcher-sh-fetcher-sh-tiktok-api-2026,
  author = {fetcher-sh},
  title = {tiktok-api security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/fetcher-sh-tiktok-api/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "tiktok-api security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "fetcher-sh"
date-released: "2026-08-14"
url: "https://skillstore.io/skills/fetcher-sh-tiktok-api/audits/1"
identifiers:
  - type: other
    value: "skillstore:fetcher-sh-tiktok-api:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Track content trends

Search recent or most-liked posts for selected keywords and compare recurring topics.

Research creator audiences

Resolve creator profiles, review their posts, and paginate follower or following lists.

Build a research pipeline

Collect paginated post, hashtag, sound, location, and comment data for downstream analysis.

Prueba estos prompts

Find recent posts

Search TikTok for posts about [keyword] from [date range]. Return the most recent results with creator, date, engagement, and link.

Review a creator

Look up TikTok creator [handle]. Summarize the profile and recent posts, then identify recurring themes and engagement patterns.

Monitor a hashtag

Resolve hashtag [name], collect its posts across available pages, and summarize new post IDs, creators, themes, and engagement since [date].

Design a controlled pipeline

Plan a paginated TikTok collection for [research goal]. Include endpoints, cursor handling, deduplication, regional scope, cost limits, retries, and privacy controls.

Mejores prácticas

Confirm the expected call count and budget before pagination or scheduled polling.
Keep the Bearer key in a protected environment variable and redact it from logs.
Store cursors and post IDs so repeated runs can resume and avoid duplicate paid calls.

Evitar

Do not expose Bearer credentials in prompts, reports, source control, or shared logs.
Do not run unbounded polling or pagination without explicit cost and stop limits.
Do not treat returned fields, availability, or platform compliance as guaranteed.