TikTok账号搜索

The code and documentation consistently describe a TikTok account search tool backed by RedFox Hub; reading REDFOX_API_KEY, sending keyword searches, and returning creator metadata are purpose-aligned.

The skill asks the agent to invoke the search from broad natural-language TikTok creator requests, which is convenient but could send loosely phrased user queries to the RedFox API without an explicit confirmation step.

The artifacts are a normal skill package with README files, SKILL.md, and one Python script; no hidden installer, package installation, or automatic startup behavior was found.

Network access to redfox.hk and use of REDFOX_API_KEY are proportionate for the feature, but the script disables TLS certificate and hostname verification for the outbound API request, exposing the credential and response integrity to interception risk.

No persistence, background workers, privilege escalation, broad filesystem access, or local data indexing were found; the only secret access is the named REDFOX_API_KEY environment variable.