📦 Bilibili Hot Daily — 哔哩热门日榜
v2.1.2每日自动拉取哔哩哔哩全站热门视频排行榜，一键生成AI摘要，并支持多平台推送，是自媒体运营者追踪热点、选题策划的免费利器。
0· 134·1 当前·1 累计
by 安全扫描
OpenClaw
可疑
high confidenceThe skill largely does what it says (fetch B站 hot list and produce a local summary/export), but the README/description advertise AI summarization and multi-channel push which are not implemented — this mismatch is misleading and could surprise users who expect external integrations or require credentials.
评估建议
This skill will fetch Bilibili's public trending list and produce local text/JSON/CSV output; it does not perform AI-powered summarization via an external API nor does it push to Telegram/WeChat/etc despite those claims in the README. Before installing or running: (1) review fetch_hot.py yourself (it only calls api.bilibili.com and writes local files), (2) run it in a sandbox or non-sensitive environment if you are unsure, (3) if you need AI summaries or push features, ask the author for the imp...详细分析 ▾
⚠ 用途与能力
The name/description promise 'AI摘要' and '多渠道推送' (AI summaries and multi-channel push). The included code (fetch_hot.py) only performs an HTTP GET to Bilibili's public API, local summarization with simple heuristics, printing, and optional JSON/CSV export — there is no AI model integration, no external push/notification code, and no credential usage. The advertised features are therefore not implemented; this is an incoherence between claims and actual capability.
✓ 指令范围
SKILL.md instructs the agent to run python3 fetch_hot.py with options (top, summary, output, format). The runtime instructions do not request extra files, environment variables, or system-wide access beyond running the script. They do not instruct reading unrelated user data or exfiltrating secrets. The mismatch is in advertised features (push/integration) that are not present in instructions — the runtime scope itself is limited and contained.
✓ 安装机制
There is no install spec (instruction-only skill with bundled code). No external downloads or installers are executed by the skill. The only runtime requirement is python3, which is reasonable for the contained Python script.
✓ 凭证需求
The skill does not request environment variables, credentials, or config paths. Given its actual behavior (calling a public Bilibili API and writing output files), that is proportional. Note: if you expect the advertised push integrations, additional credentials would be required but are not requested or used here.
✓ 持久化与权限
The skill does not request always:true and does not attempt to modify other skills or system settings. It runs as a transient Python script and writes only the files the user explicitly requests via --output.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.1.22026/3/28
添加免责声明，明确数据来源和使用限制
● 无害
安装命令
点击复制官方npx clawhub@latest install bilibili-hot-daily
镜像加速npx clawhub@latest install bilibili-hot-daily --registry https://cn.longxiaskill.com