← Back to Skills Marketplace
840
Downloads
1
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install tiktok-live-commerce
Description
Hire TikTok livestreamers for live shopping sessions, product demonstrations, flash sales, and real-time interactive commerce to drive immediate purchases an...
Usage Guidance
What to check before installing:
- Confirm PingHuman is a legitimate provider (verify https://www.pinghuman.ai, privacy policy, contact).
- The SKILL.md uses a Bearer token (ph_sk_abc123...) but the skill metadata lists no required env vars — ask the publisher how you should store and provide your API key (preferred: a dedicated, least-privilege token configured in a secure secret store, not pasted into scripts).
- Review the registration guide referenced by the skill before giving any credentials. Avoid entering high-privilege tokens until you understand the required scopes.
- Be cautious about echoing the skill URL into ~/.agent/skills.txt; back up your agent config first and only add trusted skills.
- Because this is instruction-only (no code to inspect), request source or a link to an official integration doc or API key provisioning page if you want higher assurance.
- If you want to be safer, run the skill in a sandboxed agent environment and monitor outbound network calls (confirm they go only to pinghuman.ai) and limit the token's permissions and lifetime.
If the publisher provides a declared required env var name for the token, official API docs, or a verifiable source repository, that would raise confidence and could change this assessment to benign.
Capability Analysis
Type: OpenClaw Skill
Name: tiktok-live-commerce
Version: 0.1.0
The OpenClaw AgentSkills skill bundle is classified as benign. All instructions and code examples in SKILL.md are transparently aligned with the stated purpose of hiring TikTok livestreamers via the PingHuman.ai platform. Network calls are exclusively directed to the declared API endpoint `https://www.pinghuman.ai/api/v1`, and the `echo` command for manual installation targets the agent's own configuration file (`~/.agent/skills.txt`). There is no evidence of prompt injection attempts, data exfiltration, malicious execution, persistence mechanisms, or obfuscation designed for harmful intent.
Capability Assessment
Purpose & Capability
The name/description (hire TikTok livestreamers) aligns with the SKILL.md which calls PingHuman APIs (https://www.pinghuman.ai/api/v1) and provides task payload examples. That purpose legitimately requires an API/backend service. However, the skill examples use Authorization: Bearer ph_sk_abc123... while the registry metadata lists no required credentials or primaryEnv — an inconsistency between claimed capability and declared requirements.
Instruction Scope
Runtime instructions are limited to calling the PingHuman API and adding the skill URL to ~/.agent/skills.txt. There are no broad file reads or unrelated network endpoints. The concern: the SKILL.md instructs the agent to perform API calls with bearer tokens but does not explain how tokens are obtained/stored or name any required env vars. It also suggests writing to the agent's skills config file (echo >> ~/.agent/skills.txt), which modifies local agent configuration and should be done consciously.
Install Mechanism
This is an instruction-only skill with no install spec and no code files — lowest-risk install surface. There is no package download or archive extraction.
Credentials
Although the skill clearly requires an API key / bearer token for PingHuman (seen in the curl examples), the registry metadata does not declare any required environment variables or a primary credential. Requiring an API token for the documented API is reasonable, but failing to declare it is an inverse of best practice and could cause accidental token placement in insecure locations. No other unrelated credentials are requested.
Persistence & Privilege
always is false and autonomous invocation is allowed (platform default). The SKILL.md suggests appending the skill URL to ~/.agent/skills.txt (modifies agent config). Writing to the agent's own skill registry is expected for install, but users should be aware this grants the skill persistent presence in the agent's skill list until removed.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tiktok-live-commerce - After installation, invoke the skill by name or use
/tiktok-live-commerce - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of TikTok Live Commerce skill.
- Connects agents with experienced TikTok live sellers for real-time shopping events, product demos, and flash sales.
- Provides metrics to evaluate livestreamer performance, including GMV, conversion rate, and viewer engagement.
- Includes guides to search for hosts, post live commerce gigs, and view example livestreamer profiles.
- Supports customizable session requirements, compensation, and commission structures.
- Features integration with TikTok Shop and real-time audience interaction best practices.
Metadata
Frequently Asked Questions
What is Tiktok Live Commerce?
Hire TikTok livestreamers for live shopping sessions, product demonstrations, flash sales, and real-time interactive commerce to drive immediate purchases an... It is an AI Agent Skill for Claude Code / OpenClaw, with 840 downloads so far.
How do I install Tiktok Live Commerce?
Run "/install tiktok-live-commerce" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Tiktok Live Commerce free?
Yes, Tiktok Live Commerce is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Tiktok Live Commerce support?
Tiktok Live Commerce is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Tiktok Live Commerce?
It is built and maintained by YuPeng Wu (@realroc); the current version is v0.1.0.
More Skills