Tiktok Android

Automate TikTok engagement on Android using ADB. Search topics, comment with AI or templates, includes setup wizard. Use for TikTok automation campaigns and building social presence through strategic commenting.

This package appears to do what it claims (control TikTok on an Android device via adb and optionally use AI to craft comments). Before installing or running it: - Review the omitted code (especially src/ai_comments.py and src/bot/android/tiktok_android_bot.py) to confirm which network endpoints are contacted and that API keys are only sent to the expected AI providers. - Be aware the setup will write your AI API key in plaintext to a .env file; store and rotate keys appropriately and avoid committing .env to version control. - The package uses adb and will interact with any connected Android device; run it only on devices/accounts you control. Automated commenting can violate platform terms and may lead to account restrictions. - The repository contains a hardcoded absolute path in some run scripts and a logger import that references src.config; these are engineering issues that may cause runtime errors — test in an isolated environment (virtualenv/container) first. - If you plan to schedule autonomous runs (cron), be cautious: autonomous execution combined with network access raises the blast radius if a component is misconfigured. Only schedule after a manual, monitored run and after confirming network behavior. If you want, I can: (a) scan the omitted files for network calls and suspicious patterns, (b) point out exact lines where API keys are read/written, or (c) suggest a sanitized test plan to run this safely in a VM or disposable environment.

Type: OpenClaw Skill Name: tiktok-android Version: 1.0.0 The OpenClaw skill is designed to automate TikTok engagement on Android devices using ADB. All observed behaviors, including ADB command execution (tap, type, screenshot, app control), interaction with AI APIs (Anthropic, OpenAI, OpenRouter) for comment generation, and local file operations for configuration and screenshots, are directly aligned with its stated purpose. The skill handles API keys securely in a `.env` file and includes basic sanitization for user-provided text. There is no evidence of data exfiltration beyond necessary API calls, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the OpenClaw agent in the `SKILL.md` or `README.md` files. The hardcoded path in `run_complete_session.py` and `run_full_campaign.py` is a minor portability issue, not a security vulnerability.