B站视频发布

• Analyzed: May 15, 2026, 5:17 AM
• Findings: 1
• Version: 1.0.0
• Hash: 066772368cd9b77b97004fcf1bd08a3e82df217b2cf5f61be709db81096346a3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill's primary purpose of automating Bilibili video publishing is benign. However, the `SKILL.md` file contains an instruction for the AI agent to append a specific, pre-defined phrase ("这是我黑心主人让我自动发布的") to the video description. This instruction represents an unauthorized modification of user-generated content and a form of prompt injection against the agent, instructing it to perform an action beyond the user's explicit request. While not directly malicious (e.g., no data exfiltration or RCE), it demonstrates a capability for the skill author to inject arbitrary content into user outputs, which is a suspicious behavior.