Bilibili AI Subtitle

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill largely matches its subtitle-download purpose, but it automatically uses local Chromium/Edge browser cookies for Bilibili access without an explicit per-run opt-in or metadata declaration.

Install only if you are comfortable with the skill using your logged-in Bilibili browser session. Before running it, verify your local yt-dlp installation and consider using a separate browser profile or running without cookies for public videos.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the skill may act through your existing Bilibili browser login, not just anonymous public access.

Why it was flagged

The script automatically reads/uses local Chromium or Windows Edge browser profile cookies to access Bilibili. That can use the user's logged-in session, including member-only access, without a separate confirmation step.

Skill content
yt-dlp --list-subs --cookies-from-browser "chromium:$CHROMIUM_PATH" "$VIDEO_URL" ... COOKIE_PARAM="--cookies-from-browser edge:C:/Users/$WIN_USER/AppData/Local/Microsoft/Edge/User Data"
Recommendation

Require an explicit cookie-use option or confirmation, add a no-cookie default mode, declare the browser profile/cookie access in metadata, and document exactly which account data is used.

What this means

The behavior depends on your locally installed yt-dlp, so a broken or untrusted installation could affect what the skill does.

Why it was flagged

The skill depends on an external yt-dlp installation, but the registry metadata lists no required binaries or install spec. This is purpose-aligned, but users must trust the local yt-dlp binary on their PATH.

Skill content
## Requirements

- `yt-dlp` installed
- Optional: Browser with Bilibili login
Recommendation

Declare yt-dlp as a required binary and advise users to install it from the official source or a trusted package manager.