Bilibili 收藏视频下载

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:41 PM UTC
• Version:
  1.0.0

Overview

This skill is a straightforward Bilibili favorites downloader; its main risk is expected bandwidth and disk use from saving videos locally.

Before running it, expect it may download many videos and use substantial bandwidth and disk space. Start with list-only mode, then use a small max-download value and an explicit output folder. Provide only the Bilibili favorites URL or ID, not cookies, passwords, or account tokens.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill defaults to downloading and saving potentially many video files to a local directory, but the description does not prominently warn that execution causes local filesystem writes by default. This is dangerous because users may think they are only listing or inspecting favorites, while the tool can consume disk space, create persistent files, and trigger unintended bulk downloads.

VirusTotal

67/67 vendors flagged this skill as clean.