📦

tiktok-api

Name: tiktok-api
Author: fetcher-sh

Revisão do conteúdo r1 Risco Médio 📁 Acesso ao sistema de arquivos🌐 Acesso à rede🔑 Variáveis de ambiente⚙️ Comandos externos

Explore TikTok Data with Fetcher.sh

Official TikTok access can require application review and does not fit quick, read-only research. This skill guides paid Fetcher.sh requests for posts, profiles, comments, and discovery feeds.

Suporta: Claude Codex Code(CC)

📊 67 Adequado

Instalar com meu Agente

Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.

Solicitação do agente

Review the Skillstore skill "tiktok-api" from https://skillstore.io/skills/fetcher-sh-tiktok-api.md and its manifest at https://skillstore.io/api/skills/fetcher-sh-tiktok-api/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.

Recursos legíveis por agentes

Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.

Detalhe em Markdown GET /skills/fetcher-sh-tiktok-api.md manifest assinado GET /api/skills/fetcher-sh-tiktok-api/manifest lockfile assinado GET /api/skills/fetcher-sh-tiktok-api/lockfile

Testar

Usando "tiktok-api". Find the most-liked AI agent posts from this month.

Resultado esperado:

A ranked summary of matching posts with creator names, engagement totals, publication dates, and links.
A short synthesis of repeated topics and notable outliers.

Usando "tiktok-api". Review the profile and recent posts for a specified creator.

Resultado esperado:

A profile overview followed by recent post themes, engagement observations, and the identifiers needed for deeper queries.

Usando "tiktok-api". Create a weekly hashtag monitoring workflow with a $2 budget.

Resultado esperado:

A bounded polling plan with endpoint order, cursor storage, deduplication rules, cost estimates, and a concise weekly report format.

Auditoria de segurança

Risco Médio

v1 • 14/08/2026 Abrir o relatório versionado

All 154 static alerts are false positives caused by Markdown links, code formatting, redacted placeholders, and documented calls to expected endpoints. No prompt injection, hidden execution, unrelated destination, or real embedded secret was found. Paid third-party requests and automatic x402 settlement still create a spending risk that users should control.

Arquivos analisados

664

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Preocupações de segurança confirmadas (1)

Médio

SKILL.md:73-75 SKILL.md:195-208

Paid Requests Can Settle Before Data Delivery

The skill supports paid calls and automatic x402 retries. It states that settlement precedes delivery and upstream failures receive no refunds.

The payment behavior and no-refund condition are explicitly documented, including automatic signing and retries.

Fatores de risco

📁 Acesso ao sistema de arquivos (9)

references/endpoints.md:10 references/faq.md:19 references/scenarios.md:16 SKILL.md:64 SKILL.md:198 SKILL.md:217 SKILL.md:218 SKILL.md:219 SKILL.md:223

🌐 Acesso à rede (41)

🔑 Variáveis de ambiente (33)

⚙️ Comandos externos (50)

Auditado por: codex

Compartilhar e citar este relatório

Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.

Abrir o relatório versionado

Copiar link do relatório

https://skillstore.io/skills/fetcher-sh-tiktok-api/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/fetcher-sh-tiktok-api/security.svg)](https://skillstore.io/skills/fetcher-sh-tiktok-api?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/fetcher-sh-tiktok-api?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/fetcher-sh-tiktok-api/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Cartão incorporável

<iframe src="https://skillstore.io/embed/skills/fetcher-sh-tiktok-api.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citações acadêmicas (APA · BibTeX · CFF)

Citação APA

fetcher-sh. (2026). tiktok-api security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/fetcher-sh-tiktok-api/audits/1

Citação BibTeX

@techreport{fetcher-sh-fetcher-sh-tiktok-api-2026,
  author = {fetcher-sh},
  title = {tiktok-api security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/fetcher-sh-tiktok-api/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "tiktok-api security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "fetcher-sh"
date-released: "2026-08-14"
url: "https://skillstore.io/skills/fetcher-sh-tiktok-api/audits/1"
identifiers:
  - type: other
    value: "skillstore:fetcher-sh-tiktok-api:audit:1"
    description: "Skillstore immutable audit report identifier"

Pontuação do Skillstore

Por que esta pontuação Confiança das evidências: Médio

Arquitetura

Manutenibilidade

Conteúdo

Comunidade

Conformidade com a especificação

O que você pode criar

Track content trends

Search recent or most-liked posts for selected keywords and compare recurring topics.

Research creator audiences

Resolve creator profiles, review their posts, and paginate follower or following lists.

Build a research pipeline

Collect paginated post, hashtag, sound, location, and comment data for downstream analysis.

Teste estes prompts

Find recent posts

Search TikTok for posts about [keyword] from [date range]. Return the most recent results with creator, date, engagement, and link.

Review a creator

Look up TikTok creator [handle]. Summarize the profile and recent posts, then identify recurring themes and engagement patterns.

Monitor a hashtag

Resolve hashtag [name], collect its posts across available pages, and summarize new post IDs, creators, themes, and engagement since [date].

Design a controlled pipeline

Plan a paginated TikTok collection for [research goal]. Include endpoints, cursor handling, deduplication, regional scope, cost limits, retries, and privacy controls.

Boas práticas

Confirm the expected call count and budget before pagination or scheduled polling.
Keep the Bearer key in a protected environment variable and redact it from logs.
Store cursors and post IDs so repeated runs can resume and avoid duplicate paid calls.

Evitar

Do not expose Bearer credentials in prompts, reports, source control, or shared logs.
Do not run unbounded polling or pagination without explicit cost and stop limits.
Do not treat returned fields, availability, or platform compliance as guaranteed.