Bilibili
v0.1.0提供哔哩哔哩公开视频和专栏数据摘要，支持关键词搜索、UP主表现对比和排行榜统计，符合平台规定。
⭐ 0· 281·0 current·0 all-time
byClawKK@codekungfu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description align with the instructions: the SKILL.md describes only public-page retrieval, keyword search, UP comparisons and ranking stats. The skill declares no environment variables, binaries, or installs — consistent with a read-only, instruction-only scraper for public data.
Instruction Scope
Instructions stay within the stated purpose and explicitly prohibit downloads, reverse-engineering, bulk scraping, and automatic login interactions. However, they mention using 'login state' for personal-page info and recommend 'manually open then extract', which is ambiguous about how the agent would obtain page content or session cookies (manual browser vs. agent-managed browser). This ambiguity could lead to the agent asking for credentials or cookies unless constrained.
Install Mechanism
No install spec or code files are present (instruction-only). This has the lowest install risk and nothing will be written to disk by the skill itself.
Credentials
The skill declares no required environment variables or credentials, which is proportionate. But the SKILL.md references 'login state' usage without explaining how the agent should obtain it — a potential prompt for users to share cookies or credentials if the agent seeks them. No other unrelated secrets or config paths are requested.
Persistence & Privilege
always:false and no requested persistent privileges. The skill does not request changes to other skills or system-wide settings. Autonomous invocation is allowed (platform default) but not elevated here.
Assessment
This skill appears to do what it says: summarizing public Bilibili pages without installing software or requesting secrets. Before installing: (1) do NOT share your Bilibili password or paste session cookies into the agent — the SKILL.md's reference to 'login state' is ambiguous and could prompt credential requests; prefer granting access only via a browser session you control, or refuse credential sharing. (2) Confirm you are comfortable with the agent accessing public Bilibili pages and that doing so complies with Bilibili's terms of service and your organization's policies. (3) Monitor the skill's first runs (rate limits, what fields it collects) and reject any request from the agent to perform bulk downloads, use third-party proxies, or persist credentials. If the skill later requests environment variables, cookie strings, or an external installer, treat that as suspicious and re-evaluate.Like a lobster shell, security has layers — review code before you run it.
latestvk9781qdw6jxrp2ecewk0h37yp5831c5d
License
MIT-0
Free to use, modify, and redistribute. No attribution required.