!
Third-party audit

Gen Agent Trust Hub

finding-tiktok-creators-using-trending-sounds · apidojo-io/apidojo-skills

Review
Provider summary

This skill uses an Apify actor to scrape TikTok data and includes a feature for dynamic code execution via a custom JavaScript mapping function. While the core functionality is safe, the ability to execute custom JavaScript presents a potential security risk if untrusted inputs are used.

The provider classified the analyzed snapshot as MEDIUM risk. This result applies to the content available at audit time.

Provider
Gen Agent Trust Hub
Normalized result
warn
Risk level
MEDIUM
Audited
Sep 02, 2026
Interpretation

How to use this signal

01

Confirm the source

Compare the repository, publisher, and installation command before continuing.

02

Read the content

Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.

03

Limit permissions

Use the narrowest possible scope and avoid broad credentials for third-party skills.