Security checks across malware telemetry and agentic risk
The skill is a real Bilibili transcription tool, but it handles account cookies and external Feishu/Lark sharing with enough automatic behavior and weak scoping that users should review it carefully before installing.
Install only if you are comfortable giving this skill access to Bilibili session cookies and with transcripts, video metadata, and comments potentially being sent to Feishu/Lark when lark-cli is configured. Before use, remove the bundled cookie files, use a low-privilege Bilibili account, verify all cookie storage paths, and disable or patch out automatic Lark document creation if you want local-only transcription.
if wiki_space:
cmd.extend(['--wiki-space', wiki_space])
result = subprocess.run(
cmd,
input=md_content.encode('utf-8'),
capture_output=True,# 先安装基础依赖
cmd = [sys.executable, "-m", "pip", "install"] + base_dependencies
print(f" 安装基础依赖: {' '.join(base_dependencies[:3])}...")
result = subprocess.run(
cmd,
capture_output=True,
text=True,else:
cmd = [sys.executable, "-m", "pip", "install"] + faster_whisper_deps
print(f" 安装 faster-whisper...")
result = subprocess.run(
cmd,
capture_output=True,
text=True,# 测试帮助命令
import subprocess
result = subprocess.run(
[sys.executable, str(cli_path), "--help"],
capture_output=True,
text=True,# 下载音频
audio_file = os.path.join(output_dir, "raspberry_zero.mp3")
print(f"⬇️ 下载音频中...")
subprocess.run([
"yt-dlp",
"-x", "--audio-format", "mp3",
"-o", audio_file,65/65 vendors flagged this skill as clean.