📦 bilibili-research-kit — 哔哩哔哩研究
v1.0.0基于 yt-dlp 一键提取并分析哔哩哔哩视频元数据、弹幕、字幕与 UP 主信息，自动生成结构化数据，助力内容研究与二次创作。
0· 94·0 当前·0 累计
by 下载技能包
最后更新
2026/3/24
安全扫描
OpenClaw
可疑
high confidenceThe skill's instructions mostly match its stated purpose (Bilibili extraction via yt-dlp), but the published metadata omits the required yt-dlp dependency and the runtime instructions advise exporting browser cookies (which can expose sensitive data) and linking to third-party download sites — these inconsistencies and privacy risks warrant caution.
评估建议
This skill appears to do what it says (use yt-dlp + curl to extract Bilibili metadata, subtitles and danmaku), but before using it: 1) Note the manifest did not declare yt-dlp as a required binary — install yt-dlp from an official source yourself (Homebrew or PyPI). 2) Be cautious with the suggested `--cookies-from-browser` command: exporting browser cookies can expose your logged-in sessions; only do this on a machine/account you trust and avoid sharing the exported cookie files. 3) The skill l...详细分析 ▾
ℹ 用途与能力
The SKILL.md clearly describes a yt-dlp–based Bilibili extraction toolkit and requires yt-dlp >= 2024.01.01, but the registry metadata lists no required binaries or credentials. The declared manifest omits the one core runtime dependency (yt-dlp), which is an incoherence the user should notice before installing or invoking the skill.
ℹ 指令范围
Runtime instructions are focused on extracting metadata, subtitles, and danmaku via yt-dlp and curl (comment.bilibili.com). However the instructions recommend using `--cookies-from-browser` to access logged-in content — this interacts with local browser cookie stores and can expose session cookies. The SKILL.md also points users to a third-party site (snapvee.com) for downloads. These are within the skill's functional scope but carry privacy and trust implications that are not surfaced in the metadata.
ℹ 安装机制
There is no install spec (instruction-only), which minimizes supply-chain risk. However, the instructions require installing yt-dlp (brew/pip) — a dependency not declared in the skill's 'required binaries' metadata. That mismatch could confuse automated install tooling or less-technical users.
ℹ 凭证需求
The skill declares no required environment variables or credentials (good), but the instructions ask users to export browser cookies for member-only content. Accessing browser cookies is effectively credential access and can expose unrelated site credentials; this capability is not declared or explained in the metadata and may be disproportionate for users unaware of the risk.
✓ 持久化与权限
The skill is not marked 'always' and is user-invocable with normal autonomous invocation allowed. It does not request persistent presence or system-wide configuration changes in the manifest.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/24
Initial release of Bilibili Research Kit for content extraction and analysis: - Extracts Bilibili video metadata, danmaku (bullet comments), subtitles, UP主 profile info, and series/collection data using yt-dlp. - Guides users through installation, video type detection, and command usage for various extraction tasks. - Handles multi-part videos, provides output formatting tips, and supports multiple Bilibili URL patterns. - Includes error handling for login, regional restrictions, and unavailable content. - Clarifies scope (not for video downloading) and provides alternative download suggestions.
● 可疑
安装命令
点击复制官方npx clawhub@latest install bilibili-research-kit
镜像加速npx clawhub@latest install bilibili-research-kit --registry https://cn.longxiaskill.com