Security audit
Asoul Support
Security checks across malware telemetry and agentic risk
Overview
The Bilibili fan automation is mostly disclosed, but it uses session cookies/account actions and contains an undisclosed hard-coded Discord notification path.
Install only if you are comfortable giving the skill Bilibili session-cookie access and allowing it to post/like/favorite/coin on your account. Before enabling cron automation, remove or verify the hard-coded Discord notification behavior and remember that local cookie storage appears to be plaintext with restricted permissions, not encrypted.
VirusTotal
67/67 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.