Bilibili Messager | B站私信

Bilibili private messaging via browser automation. B站私信发送，通过浏览器自动化发送私信、获取聊天记录。Use when user needs to send B站私信、回复消息、获取聊天记录。Requires browser login. Triggers:...

Security Scan

The skill's instructions, requirements, and behavior are internally consistent with a browser-automation tool for sending and reading Bilibili private messages, but it will read and interact with your logged-in browser session so treat it as access to sensitive chat data.

Purpose & Capability

The name/description (Bilibili private messaging via browser automation) matches the SKILL.md: it only uses browser actions and DOM scripts to find users, send messages, and extract history. No unrelated binaries, installs, or credentials are requested, which is appropriate because it relies on an existing logged-in browser session.

Instruction Scope

Instructions explicitly tell the agent to open the Bilibili messages page, take snapshots, execute injected JavaScript to set content and click Send, and to scrape chat history (including scrolling). That is within the stated purpose, but these actions access all page content available in the logged-in browser (sensitive private messages and other page data). The SKILL.md also insists on 'continuous execution, do not stop', which is operationally brittle and could result in prolonged browser access if run autonomously — the behavior is expected for this purpose but requires user caution.

Install Mechanism

No install spec and no code files are present; the skill is instruction-only and performs actions using the agent's browser automation primitives. This is the lowest-risk install posture.

Credentials

The skill requests no environment variables, credentials, or config paths. It does require that the user's browser is already logged into Bilibili, which is a reasonable requirement for this functionality. Note: because it scrapes and sends private messages from the logged-in session, the agent will necessarily access sensitive data in that session.

Persistence & Privilege

always is false and there's no indication the skill modifies other skills or system-wide settings. Autonomous invocation is allowed by default (platform standard) — users should consider whether they want the agent to call this skill without interactive confirmation because it can read/send private messages while active.

Assessment

This skill will run JavaScript in your browser and read/send private Bilibili messages using whatever account is currently logged in. That means it can access sensitive chat contents and send messages on your behalf. Before using it: (1) only run it when you intend the agent to access that particular logged-in account; (2) avoid enabling unattended/autonomous runs unless you fully trust the skill and agent prompts; (3) test on a throwaway account first to verify behavior; (4) be aware snapshots capture page content — don't snapshot when you want to avoid capturing unrelated private data; (5) if you are uncomfortable, prefer a manual workflow (copy message text and paste) or ask the skill author for provenance (homepage/source) since the skill source is unknown.

Bilibili Private Messaging

通过浏览器自动化发送B站私信、获取聊天记录。

⚠️ 执行模式

重要：连续执行所有步骤，中途不要停止！

⚠️ 减少快照

快照数据量大，可能导致网络超时。只在必要时获取快照：

• 第一次：打开页面后，需要找到用户
• 最后一次：发送后确认结果

点击后不需要快照，直接发送消息！

前置条件

• 用户需要在浏览器中已登录 B站账号
• 需要知道目标用户的用户名（支持部分匹配）

发送私信流程

步骤 1：打开页面

browser action=open targetUrl=https://message.bilibili.com/#/whisper

步骤 2：获取快照，找到用户

browser action=snapshot

在快照中找到目标用户（按用户名部分匹配），记录 ref。

步骤 3：点击进入对话

browser action=act request={"kind": "click", "ref": "<用户ref>"}

步骤 4：直接发送消息（不要获取快照！）

点击后立即用 JavaScript 发送，不要再获取快照：

() => {
  const inputArea = document.querySelector('[contenteditable="true"]');
  if (inputArea) {
    inputArea.textContent = '消息内容';
    inputArea.dispatchEvent(new InputEvent('input', { bubbles: true }));
    const sendBtn = document.evaluate(
      "//div[contains(text(), '发送')]", 
      document, 
      null, 
      XPathResult.FIRST_ORDERED_NODE_TYPE, 
      null
    ).singleNodeValue;
    if (sendBtn) sendBtn.click();
    return 'Message sent';
  }
  return 'Input not found';
}

步骤 5：获取快照确认发送成功

browser action=snapshot

确认消息已出现在聊天记录中，然后向用户报告结果。

获取聊天记录

⚠️ 重要：确定发送方的方法

B站私信的 DOM class 哈希值（如 _MsgIsMe_o7f0t_9）可能因用户/会话不同而变化，不能硬编码！

推荐方法：通过头像位置判断

1. 先获取快照或截图，观察消息布局
2. 左侧头像 = 对方发送的消息
3. 右侧头像 = 自己发送的消息

通过头像位置提取聊天记录

() => {
  const main = document.querySelector('main');
  if (!main) return 'No main';

  const msgBlocks = main.querySelectorAll('[class*="_Msg_"]');
  const messages = [];

  msgBlocks.forEach(block => {
    const text = block.textContent.trim();
    
    // 提取日期
    const dateMatch = text.match(/(202[56]年\d+月\d+日 \d+:\d+|今天 \d+:\d+)/);
    
    if (dateMatch) {
      const date = dateMatch[1];
      let content = text.replace(dateMatch[0], '').trim();
      content = content.replace(/^(\d+:\d+)?/, '').trim();
      
      if (content && content.length > 1) {
        // 通过头像位置判断发送方
        const img = block.querySelector('img');
        let sender = '对方'; // 默认
        
        if (img) {
          const imgRect = img.getBoundingClientRect();
          const blockRect = block.getBoundingClientRect();
          // 如果头像在右侧，是自己发送的
          if (imgRect.left > blockRect.left + blockRect.width / 2) {
            sender = '自己';
          }
        }
        
        messages.push({
          date,
          sender,
          content: content.substring(0, 200)
        });
      }
    }
  });

  // 去重
  const seen = new Set();
  return messages.filter(msg => {
    const key = msg.date + msg.content.substring(0, 50);
    if (seen.has(key)) return false;
    seen.add(key);
    return true;
  });
}

备用方法：通过 class 名称包含 "Me" 判断

如果 class 名称包含 "Me" 或 "Self" 等关键词，可以辅助判断：

const className = block.className;
const isMe = className.toLowerCase().includes('me') || 
             className.toLowerCase().includes('self');

但要注意： 哈希值部分可能变化，不要依赖完整的 class 名！

滚动加载历史记录

B站私信使用懒加载，需要滚动才能加载更早的记录：

() => {
  // 查找滚动容器（通过 overflow 样式）
  const allElements = document.querySelectorAll('*');
  for (const el of allElements) {
    const style = window.getComputedStyle(el);
    if ((style.overflow === 'auto' || style.overflowY === 'auto') && 
        el.scrollHeight > el.clientHeight &&
        el.closest('main')) {
      el.scrollTop = 0;
      return 'Scrolled container: ' + el.className;
    }
  }
  return 'No scroll container found';
}

滚动后等待 1-2 秒让内容加载，再获取快照或提取消息。

注意事项

• 消息长度限制：500字符（超过需分段发送）
• 发送频率有限制，避免刷屏
• 如果找不到用户，先向用户确认用户名是否正确
• 获取历史记录时可能需要多次滚动触发懒加载
• 不要硬编码 DOM class 的哈希值，它们可能变化！用头像位置或关键词判断更可靠