Versioned security assessment

Report ID: SA-7DE0D7E0

7/1/2026, 12:19:43 AM

maxhub-tiktok security assessment v2

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
maxhub-tiktok
Version
v2
Maintainer
XieWxx
Source
github.com/XieWxx/maxhub-api-skills/tree/main/maxhub-tiktok
Coverage
9 Files scanned · 9,970 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

High

3 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static findings are partly false positives from Markdown code spans and reference tables, but the skill intentionally runs curl against a third-party API with MAXHUB_API_KEY. Human review is required because references include metric manipulation and interaction capabilities that conflict with the stated read-only claim.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

9 Files scanned · 9,970 Lines analyzed

5 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 4 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Observed in 4 evidence locations

External commands

May invoke commands or programs outside the Skill.

Observed in 4 evidence locations

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (3)

RISK-001 High
SKILL.md:10-22SKILL.md:47-58SKILL.md:74-78
Third-Party Credential Transmission
The skill requires MAXHUB_API_KEY and instructs curl requests that send it as an Authorization bearer token to https://www.aconfig.cn. This is expected for the service, but it exposes user credentials to a community third-party API provider.
The API key requirement, network destination, and Authorization header are all explicitly documented. The risk is confirmed, although it may be legitimate for this API wrapper.
RISK-002 High
SKILL.md:80-82references/api-video.md:49-58
Metric Manipulation Endpoint Documented
The skill claims it is read-only, but a referenced endpoint is described as increasing a TikTok video play count by video ID. This creates abuse risk and contradicts the stated marketplace safety boundary.
The read-only claim and the metric-increase description are both direct evidence. The endpoint description is specific enough to confirm semantic risk.
RISK-003 Medium
SKILL.md:49-60SKILL.md:88-90README.md:19-26
Shell Command Execution Is Mostly Documented Usage
The static analyzer reported many backtick execution hits, but most are Markdown code spans or fenced examples. The confirmed command surface is curl and environment checks, with no evidence found of user-controlled shell interpolation beyond documented endpoint parameters.
Direct shell snippets exist, but the huge static count is inflated by Markdown formatting. I did not find evidence of hidden Ruby execution in the inspected context.
Needs review findings (2)
REVIEW-001 High
README.md:14-15SKILL.md:127-133README_CN.md:14-15
Interaction and Token Tooling Require Review
README lists interaction actions such as like, follow, post_comment, reply_comment, collect, and forward. The skill also routes token, device, signature, and guest-cookie tooling, which may support account automation or access control bypass.
The interaction and token-tool names are explicitly present, but not every endpoint implementation was verified as write-capable. The combination is strong enough for high-risk human review.
REVIEW-002 Medium
references/api-video.md:21-35SKILL.md:127-133
Platform Signature and Device Utilities
References describe TikTok request encryption, signature, token, web ID, and device registration utilities. These can be legitimate API helpers, but they may also facilitate scraping or automation that bypasses normal client controls.
The endpoint descriptions and routing table explicitly include signature, token, and device tooling. Intent could be legitimate analytics support, so the confidence is high but not conclusive.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (2)
Low
_meta.json:6-7SKILL.md:21-22README.md:25-26
Hardcoded URLs Are Expected Service References
The hardcoded URL findings point to the declared MaxHub service and public TikTok media URLs in documentation. These are expected for an API reference skill and are not by themselves suspicious.
The URLs align with the advertised service and documentation examples. The risk comes from credential transmission and endpoint behavior, not the presence of static URLs.
Low
SKILL.md:127references/api-user.md:1references/api-video.md:1
High Entropy and Long Line Look Like Generated Documentation
The high entropy and long-line heuristics correspond to large generated Markdown reference tables and route lists. No evidence found of binary payloads or encoded executable content in the inspected sections.
The long line is a visible endpoint routing table, and the referenced files are Markdown API documentation. This supports a false-positive assessment for obfuscation, while preserving the separate behavior risks.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable