Security audit
B站数据助手 SocialDataX
Security checks for vulnerabilities and agentic risk
Overview
This Bilibili research skill is coherent and mainly read-only, with its API key use and optional local video download behavior disclosed.
Install only if you are comfortable sending Bilibili queries, URLs, and your SocialDataX API key to SocialDataX. Use video download only for content you are allowed to save, and consider pinning or reviewing the npm package because the examples use @latest.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.