Bili Rs
v1.0.1Development skill for bili-rs, a Rust CLI tool for Bilibili (B站). Use when implementing features, fixing bugs, or extending the bilibili-cli-rust codebase. P...
⭐ 0· 116·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is presented as a development/reference guide for the bili-rs project and all included material (architecture rules, command list, API endpoints, payload helpers) matches that stated purpose. It does not request unrelated binaries, credentials, or system access in the metadata.
Instruction Scope
SKILL.md and references are purely developer guidance (where to add files, error handling patterns, output envelopes, etc.). They reference a credential file (~/.bilibili-cli/credential.json), authentication tokens (SESSDATA, bili_jct), an $OUTPUT env var, and WBI signing logic — all sensible for a Bilibili client, but these are project conventions rather than explicit runtime requirements. The instructions do not tell the agent to read arbitrary system files or exfiltrate data, but they do describe where credentials would be stored/used if the developer implements auth features.
Install Mechanism
There is no install spec and no code files to be written or executed by the platform; this is instruction-only, which minimizes install-time risk.
Credentials
The skill does not declare or require any environment variables or secrets in its metadata. However, the documentation discusses Bilibili auth tokens (SESSDATA, bili_jct), a credential file path, and output-resolution via $OUTPUT — all appropriate for a Bilibili CLI but worth noting because providing such secrets to the agent or test environment would grant access to a user account and write-capable operations (likes, coins, dynamics, etc.).
Persistence & Privilege
The skill is not marked 'always: true' and uses the platform defaults for invocation. It does not request modification of other skills or system-level settings.
Assessment
This skill is a codebase-style reference for building a Rust Bilibili CLI and appears internally consistent. It does mention where the CLI would store credentials and which API calls require SESSDATA/bili_jct; do not provide those secrets to the agent unless you intend it to act on your Bilibili account. If you plan to implement/write features that perform 'write' operations (like/coin/unfollow/dynamic-post), test in a disposable or test account. Because this is instruction-only, review any actual source code you add or run locally before executing network calls; the SKILL.md itself does not request unusual privileges, but real risk arises if you run code that uses the described credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk973dwqyy9cgbffk9sre1wecvs833j0y
License
MIT-0
Free to use, modify, and redistribute. No attribution required.