tiktok-marketing
Enables creation and optimization of TikTok content for brand growth, leveraging analytics and automation for effective marketing strategies.
Install this skill
Security score
The tiktok-marketing skill was audited on Mar 7, 2026 and we found 21 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 172 | Authorization: `Bearer ${access_token}`, |
Template literal with variable interpolation in command context
| 198 | 'Content-Range': `bytes 0-${videoFileSize - 1}/${videoFileSize}`, |
Template literal with variable interpolation in command context
| 208 | Authorization: `Bearer ${access_token}`, |
Template literal with variable interpolation in command context
| 222 | Authorization: `Bearer ${access_token}`, |
Template literal with variable interpolation in command context
| 230 | headers: { Authorization: `Bearer ${access_token}` }, |
Fetch to external URL
| 152 | const tokenRes = await fetch('https://open.tiktokapis.com/v2/oauth/token/', { |
Fetch to external URL
| 169 | const initRes = await fetch('https://open.tiktokapis.com/v2/post/publish/video/init/', { |
Fetch to external URL
| 205 | const statusRes = await fetch('https://open.tiktokapis.com/v2/post/publish/status/fetch/', { |
Fetch to external URL
| 219 | const videosRes = await fetch('https://open.tiktokapis.com/v2/video/list/?fields=id,title,create_time,share_url,duration,cover_image_url,like_count,comment_count,share_count,view_count', { |
Fetch to external URL
| 229 | const userRes = await fetch('https://open.tiktokapis.com/v2/user/info/?fields=display_name,avatar_url,follower_count,following_count,likes_count,video_count', { |
Access to .env file
| 145 | authUrl.searchParams.set('client_key', process.env.TIKTOK_CLIENT_KEY); |
Access to .env file
| 148 | authUrl.searchParams.set('redirect_uri', process.env.TIKTOK_REDIRECT_URI); |
Access to .env file
| 156 | client_key: process.env.TIKTOK_CLIENT_KEY, |
Access to .env file
| 157 | client_secret: process.env.TIKTOK_CLIENT_SECRET, |
Access to .env file
| 160 | redirect_uri: process.env.TIKTOK_REDIRECT_URI, |
External URL reference
| 141 | const TIKTOK_AUTH_URL = 'https://www.tiktok.com/v2/auth/authorize/'; |
External URL reference
| 152 | const tokenRes = await fetch('https://open.tiktokapis.com/v2/oauth/token/', { |
External URL reference
| 169 | const initRes = await fetch('https://open.tiktokapis.com/v2/post/publish/video/init/', { |
External URL reference
| 205 | const statusRes = await fetch('https://open.tiktokapis.com/v2/post/publish/status/fetch/', { |
External URL reference
| 219 | const videosRes = await fetch('https://open.tiktokapis.com/v2/video/list/?fields=id,title,create_time,share_url,duration,cover_image_url,like_count,comment_count,share_count,view_count', { |
External URL reference
| 229 | const userRes = await fetch('https://open.tiktokapis.com/v2/user/info/?fields=display_name,avatar_url,follower_count,following_count,likes_count,video_count', { |
Install this skill with one command
/learn @terminalskills/tiktok-marketing