Security audit
bbc-skill
Security checks for vulnerabilities and agentic risk
Overview
The skill largely matches its stated purpose (fetching Bilibili comments) but contains several mismatches and privacy-affecting behaviors (browser cookie extraction/decryption, undocumented env/config usage, and a silent git auto-update) that warrant caution before installing.
What to consider before installing/use: - This skill is coherent with its goal (collecting Bilibili comments) but requires access to your browser cookies or SESSDATA. A valid cookie (SESSDATA) effectively authorizes the skill to read account-protected API responses — treat it like a password and only use cookies from accounts you control. - The code contains platform-specific cookie-decryption routines (macOS security+openssl, Linux secret-tool, Windows DPAPI/PowerShell). Those routines will read local browser files and may invoke system utilities: only run this skill on machines you trust and where you are comfortable allowing such local file access. - The SKILL.md instructs a daily silent 'git pull' auto-update of the skill directory. Even if the repo is on GitHub, auto-updating means remote code can change after you inspect it. If you plan to install, prefer cloning the repo yourself and disable or remove the auto-update step (or run updates manually after review). - Metadata in the registry omits environment/config requirements the skill actually uses. Expect to supply either a cookie file (--cookie-file / $BBC_COOKIE_FILE) or $BBC_SESSDATA; verify that cookie values are not printed by the tool and supply only the minimal credential (SESSDATA) if you prefer. - If you decide to proceed: - Inspect the cookie extraction modules (src/bbc/cookie/*) to understand exactly what files/commands will be read/executed. - Run the tool in a controlled environment first (non-production machine, container, or VM). - Avoid using account cookies you cannot afford to lose (use a throwaway/test account if possible). - Consider cloning the repository and removing or commenting out the auto-update lines before adding as a skill. - Verify remote git origin and pin to a specific commit tag rather than allowing automatic pulls. - If you are not comfortable with local cookie decryption, you can instead export just the SESSDATA value manually and pass it via $BBC_SESSDATA or --cookie-file containing only Netscape-format cookie with minimal fields; this reduces the need for the skill to access/decrypt browser key material. Overall: the functionality is plausible and useful for its stated purpose, but because it touches sensitive local credentials and auto-updates itself, do not install blindly — review the code and disable automatic updates unless you trust the repository and update process.
Static analysis
No suspicious patterns detected.