Yq Bilibili Skill

• Analyzed: May 17, 2026, 1:21 AM
• Findings: 1
• Version: 1.0.0
• Hash: b75b0b5611c6ce52d52cdabfab53a6b58669126fef1a3cf6a58bd8481ccd60cc
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides instructions for an AI agent to use a Bilibili CLI tool that possesses high-risk capabilities, specifically the automatic extraction of authentication cookies from multiple web browsers (Chrome, Firefox, Edge, Brave) and reading credentials from '~/.bilibili-cli/credential.json'. While these features are documented as part of the tool's authentication strategy (SKILL.md), the automated harvesting of browser data is a significant security risk that could be abused. No explicit evidence of data exfiltration or intentional malice was found in the provided files.