Install
$ agentstack add skill-aronhy-tiktok-agent-skills-tiktok-shop-operator ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
TikTok Shop Operator
Use KSS MCP to turn natural-language TikTok Shop research requests into verified results and actionable operating plans.
Load References
- Read [references/mcp-tools.md](references/mcp-tools.md) before choosing tools, parameters, joins, or return fields.
- Read [references/workflows.md](references/workflows.md) for operational or multi-step tasks.
- Read [references/output-templates.md](references/output-templates.md) before presenting results.
- Read [references/examples.md](references/examples.md) only when intent, pagination, missing-data, or error behavior is unclear.
Do not duplicate detailed tool schemas in this file.
Interpret the Request
- Extract region, keyword/category, price, rating, sales, revenue, growth rate, date window, requested count, and sorting.
- Preserve every explicit user condition.
- Ask one concise question only when a missing condition blocks a valid query.
- Use an MCP default only when valid, and disclose it in the query scope.
- Identify whether the task needs one tool or a cross-tool workflow.
Choose Tools
- Use
product_searchfor products, prices, ratings, sales, growth, shops, and product-level trend filters. - Use
shop_searchfor shops, service metrics, shop ratings, product counts, and shop-level sales. - Use
video_searchfor commerce videos, video sales, engagement, products, shops, and embedded creator data. - Use
creator_searchfor creator discovery and creator metrics. - Use
caption_extractfor captions from a specific TikTok video URL.
Use IDs for joins. For video-to-creator enrichment, query by returned Handle/name with searchType=N, then confirm the returned creator ID against the video creator ID when available.
Execute Safely
- Query the smallest useful scope first.
- When the user requests “all,” paginate until there is no next page, the tool limit is reached, or quota/rate limiting stops collection.
- Never call the first page “all results.”
- Deduplicate paginated objects by their stable ID.
- Apply the user's sort. If none is provided, sort the relevant returned sales amount descending.
- Do not invent an
orderFieldvalue absent from the reference. Sort locally within the disclosed collected scope when necessary. - Keep regions, currencies, and time windows separate.
- Check the live tool schema or official examples before encoding a percentage growth filter; never guess whether 50% means
50or0.5. - Never invent fields, results, links, quota status, or successful tool calls.
- Write missing fields as “未提供.”
- Stop on 401, unavailable tools,
ERROR_API_MINUTE_MAX, orERROR_API_MONTH_MAX, and report completed versus remaining work. - Do not silently broaden filters after an empty result. Suggest one relaxation and wait for approval.
Respect Action and Credential Boundaries
- Never repeat, store, log, or place a user-provided MCP Key in generated files, examples, or answers.
- Refer to credentials only as
${KSS_MCP_KEY}or a redacted value. - Do not purchase quota, change subscriptions, bypass limits, or weaken platform restrictions.
- Do not contact creators, send messages, place orders, or publish TikTok content.
- Produce research, drafts, recommendations, and action plans only. Treat any external execution as a separate user-authorized task requiring an appropriate tool.
Present Results
- Start with the query scope: region, period, filters, sorting, pages, row count, and completeness.
- Use the applicable template from
references/output-templates.md. - Mark interrupted collections as “非完整结果.”
- Use MCP-returned shop links directly.
- Construct creator or video links only when the required Handle and ID are present.
- Do not invent product links.
- Separate evidence from interpretation.
- End analytical tasks with:
- the main conclusion;
- supporting evidence;
- uncertainty and risks;
- prioritized next actions.
Handle Missing MCP
If the KSS MCP tools are unavailable, explain that MCP must be connected or refreshed. For 401, tell the user to verify the secret-key header and MCP permission. Never substitute ordinary web results and present them as KSS MCP data.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: aronhy
- Source: aronhy/tiktok-agent-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.