bggg-tiktok-downloader Eval =========================== Status: review Score: 69/100 Risk: medium Decision: manual_review Policy: review Reason: Test manually in an isolated workspace and compare against safer alternatives. Install: npx skills add binggandata/bggg-skills --skill bggg-tiktok-downloader Required checks: - WARN Task fit: Task fit is weak; compare alternatives before selecting. - PASS Install path: Install handoff is available. - PASS Install command safety: standard package or runtime install path - WARN Trust score: Potentially useful, but at least one trust signal needs human inspection. - WARN Audit score: Needs review - WARN Agent safety gate: Sparse or mixed signals. Useful for discovery, but not for autonomous installation. - PASS License clarity: MIT - WARN Permission surface: shell or command execution, network or browser access Warnings: - Task fit: Task fit is weak; compare alternatives before selecting. - Trust score: Potentially useful, but at least one trust signal needs human inspection. - Audit score: Needs review - Agent safety gate: Sparse or mixed signals. Useful for discovery, but not for autonomous installation. - README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context - Permission surface: shell or command execution, network or browser access - High-risk permission hints: Shell or command execution - SKILL.md is primarily in Chinese, which may reduce accessibility for non-Chinese users, though an English README is provided. - The script relies on external services (yt-dlp, tikwm) and optional TikTokDownloader, but installation and dependency management are only documented in README, not in SKILL.md. - Error handling for network failures, rate limiting, or invalid URLs is not explicitly described in SKILL.md, though implementation notes mention some fallback logic. - Quality score needs review Validation plan: 1. Inspect repository, README/SKILL.md, license, and recent commits before production use. 2. Install in an isolated workspace or sandbox with no production secrets available. 3. Run the smallest representative task and record files touched, commands run, network access, and outputs. 4. Compare the selected skill against at least one alternative when the eval status is review or failed. 5. Promote only after the agent reports a successful verification result and unresolved warnings are accepted. Do not use when: - teams that need a vendor-supported SLA - production agents without a repository review - SKILL.md is primarily in Chinese, which may reduce accessibility for non-Chinese users, though an English README is provided. - No OpenAgentSkill engagement data yet - High-risk permission hints: Shell or command execution - The script relies on external services (yt-dlp, tikwm) and optional TikTokDownloader, but installation and dependency management are only documented in README, not in SKILL.md. - Error handling for network failures, rate limiting, or invalid URLs is not explicitly described in SKILL.md, though implementation notes mention some fallback logic. - Quality score needs review URLs: - Skill: https://www.openagentskill.com/skills/binggandata-bggg-tiktok-downloader - Audit: https://www.openagentskill.com/skills/binggandata-bggg-tiktok-downloader/audit - JSON: https://www.openagentskill.com/api/agent/evals?slug=binggandata-bggg-tiktok-downloader