Youtube and Bilibili Subtitle Extraction and Summary

• Analyzed: May 3, 2026, 6:36 PM
• Findings: 1
• Version: 1.0.0
• Hash: a769fa05bc3af4b06191e271fd9eed29c6fbe6661078c635ef84bd306cbcf431
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill includes instructions in SKILL.md to automatically extract browser cookies from Chrome using 'yt-dlp --cookies-from-browser' and save them to a local file (~/bilibili_cookies.txt). While this is a functional feature of yt-dlp used to access Bilibili subtitles, it involves accessing sensitive authentication data from the user's system. Additionally, the skill performs automated software installation and updates (pip install yt-dlp, yt-dlp -U) directly within the agent's execution flow.