biliup-skills

• Analyzed: May 11, 2026, 5:56 AM
• Findings: 1
• Version: 1.2.0
• Hash: 212e4a39241ae81b85195616748bdd5d4c67c81052a3dc8e94ca87d5e3d12ffa
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate interface for uploading videos to Bilibili using the official `biliup` Python CLI. It includes a setup script (`setup_biliup.sh`) to install dependencies via PyPI and a helper script (`qr_login.py`) to facilitate Bilibili's QR code login process. While the skill handles sensitive login credentials (`cookies.json`), the code and instructions (`SKILL.md`) are transparent, emphasize local storage, and lack any indicators of data exfiltration, unauthorized remote execution, or malicious prompt injection.