tiktok-launch-video — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited tiktok-launch-video (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Produce a TikTok-native launch video using HyperFrames — programmatic HTML/CSS video, deterministic, agent-friendly.
This skill is opinionated: it forces the TikTok grammar (9:16, hook < 1s, burned-in captions, fast cuts, native text overlays) instead of porting a 16:9 landscape video to vertical.
/tiktok-launch-video https://example.com/launch — pulls context from a launch page /tiktok-launch-video "we're shipping AI brand guardrails for marketers" — short brief /tiktok-launch-video — interview the user
Run once on this machine:
node --version # ≥ 22
ffmpeg -version | head -1 # ≥ 6If either fails, ask the user to install Node 22+ and FFmpeg before continuing.
Try sources in this order — stop at the first one that gives you enough to write the script. Don't redo work the user has already done.
1a. Local file — read .agents/product-marketing-context.md or .claude/product-marketing-context.md if present.
1b. Cogny MCP context tree — if the cogny MCP server is connected (check via tools — mcp__cogny__get_context_tree_overview or any mcp__cogny__* tool), query it:
mcp__cogny__get_context_tree_overview # see what's documented
mcp__cogny__search_context query="<product>" # pull customer / pricing / positioning nodes
mcp__cogny__read_context_node node_id="…" # drill into the most relevant nodesThe context tree usually contains things public scraping can't: real customer names, ICP, pricing tiers, current quarter goals, what's been launched recently, what's on the roadmap. Check it before falling back to web scraping.
1c. Public web — if a URL was passed and 1a/1b didn't give you enough, WebFetch the page and extract product name, value prop, core benefit, target user, one concrete proof point.
1d. User brief — if a short brief was passed, use it directly.
After 1a–1d, ask the user only for what's still missing from the TikTok hook checklist below.
TikTok hook checklist (what you actually need before you can write the script):
Don't proceed without all five. If you're guessing, ask.
Make this look like the user's brand, not a stock template. Ask for one of:
tailwind.config.* or globals.css with CSS variablesbrand-kit.json (.agents/brand-kit.json / .claude/brand-kit.json / project root)Produce a brand-kit.json with at minimum: colors.background, colors.foreground, colors.primary, colors.accent, type.family, voice.register. Save it to the HyperFrames project root.
For full schema, extraction patterns, and voice → composition mapping see references/brand-identity.md.
The composition template reads these as CSS variables (--bg, --fg, --primary, --accent, --font-display) — so once the kit is wired, the same template renders on-brand for any user.
Don't invent a format. Pick one of these — all are proven on TikTok and map cleanly to HyperFrames:
| Format | When to use | Structure |
|---|---|---|
| POV | Relatable role-based pain | "POV: you're a [role]" → pain → punchline reveal of product |
| Build-in-public | Founder/early launches | "I built X in Y days because Z" → quick demo → result |
| Contrarian take | Strong opinion, category creation | "Everyone says X. They're wrong because Y" → demo |
| Before / After | Workflow improvement | "This used to take 4 hours" → cut → "Now it takes 30 seconds" |
| List-tease | Multi-feature reveal | "3 things [tool] does that no one talks about" → 1, 2, 3 → CTA |
Pick one. Confirm with the user before writing.
Write a beat sheet, not prose. Each beat is one card or moment. Constraints:
Hand the beat sheet back to the user and wait for confirmation before composing. One round of revisions is normal.
Use the CLI. Don't try to handcraft package.json.
# In the user's working directory, or a videos/ subdirectory if they prefer
npx -y hyperframes@latest init <product-slug>-tiktok --yes
cd <product-slug>-tiktokThis creates index.html, meta.json, hyperframes.json, plus CLAUDE.md / AGENTS.md with framework rules. Read CLAUDE.md once — it documents the data-* attribute conventions and the window.__timelines registration this skill depends on.
Edit index.html to be a 1080×1920 composition. The pattern below is the minimum viable TikTok-native composition — adapt the copy, keep the structure.
Key rules (these come from HyperFrames, do not skip):
class="clip" plus data-start, data-duration, data-track-index.data-composition-id, data-width, data-height, data-duration.window.__timelines["<composition-id>"].Date.now(), no Math.random(), no fetch() — renders must be deterministic.Reference composition: see references/composition-template.html.
A few TikTok-specific styling rules to follow:
y or scale tween. Cuts are hard, not crossfades.hyperframes capture <url>) and crop into the 9:16 frame instead of using a generic stock clip.npx hyperframes lintFix every error. Warnings are usually safe but read them.
npx hyperframes render --output launch.mp4A 15s composition typically renders in 30–90 seconds depending on the machine. Output is H.264 MP4, 1080×1920, 30fps.
Open the file, scrub through it once. Then check:
If any check fails, edit and re-render. Do not ship a video that fails any of the above.
If the user wants to run this as a paid in-feed ad (not an organic post), use the TikTok Ads MCP to set up the campaign skeleton. Don't auto-launch.
tiktok_ads__tool_list_advertisers
tiktok_ads__tool_get_pixels(advertiser_id) # confirm tracking
tiktok_ads__tool_create_campaign(...) # objective: TRAFFIC or VIDEO_VIEWS, status: DISABLE
tiktok_ads__tool_create_ad_group(...) # placement: TIKTOK only; daily budget; status: DISABLE
# Upload the rendered MP4 manually in TikTok Ads Manager — the MCP doesn't currently
# upload creatives. Then:
tiktok_ads__tool_create_ad(...) # status: DISABLEAll entities should be created DISABLE. Print a summary and tell the user exactly which IDs to enable in TikTok Ads Manager once they've reviewed the creative.
For organic posting: just hand them launch.mp4 and tell them to upload via the TikTok app (organic uploads are not API-supported).
When you finish, print:
/reddit-launch-video — same pattern for Reddit's idiomatic format/linkedin-launch-video — same pattern for LinkedIn/video-to-gif — convert the rendered MP4 into a feed-ready GIF/ad-copy-writer — generate the headline / caption that ships with the video~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.