📦 Bilibili Up Master — B站UP主分析
v1.0.0一站式B站UP主运营助手，实时监控热门视频、粉丝走势与互动数据，一键生成竞品对比与内容策划建议，并支持日报周报自动输出，助力账号快速涨粉与内容优化。
0· 73·0 当前·0 累计
by @onlyloveher下载技能包
最后更新
2026/4/1
安全扫描
OpenClaw
安全
high confidence该技能的代码、指令与依赖均围绕B站监控/分析工具构建；未发现无法解释的身份凭据、安装器或外部端点，但请注意实现中禁用SSL验证、依赖浏览器会话及使用/tmp存储等安全相关细节。
评估建议
This skill appears to do what it says and requests no unusual secrets or installers. Before installing or running it, consider: 1) The code disables SSL certificate validation — this is insecure; ask the author to remove that behavior or run the skill in a network you trust. 2) The skill uses the agent's browser or agent-reach tool; if those tools have access to your logged-in Bilibili session (cookies), the skill can view account-only pages. Only run it with a browser profile/session you are co...详细分析 ▾
✓ 用途与能力
Name/description (B站热门监控、UP主/视频分析、内容策划) match the included code and SKILL.md. The code provides report generation, data scaffolding, and helper functions that align with the stated purpose. No unrelated credentials, binaries, or install steps are requested.
ℹ 指令范围
SKILL.md instructs the agent to use the platform browser or agent-reach to fetch B站 pages (expected for scraping). The instructions and code do not attempt to read arbitrary local files or unexpected env vars. Important caveats: (1) the code disables SSL certificate validation (ssl._create_default_https_context = ssl._create_unverified_context), which weakens TLS and can allow MITM when the agent fetches pages; (2) the skill expects to use a browser profile (profile="openclaw") or agent-reach, which can expose any logged-in session cookies or private pages to the skill if those sessions are available to the agent.
✓ 安装机制
No install spec — instruction-only plus Python source files. Nothing is downloaded from arbitrary URLs and no installer writes into unusual system locations. This is low-risk from an install mechanism point of view.
ℹ 凭证需求
The skill declares no required environment variables or credentials (proportionate). However, runtime behavior depends on the agent's browser/agent-reach tooling and profile: if those tools expose browser cookies or logged-in sessions, the skill can access pages or data that require login (the SKILL.md even mentions some UP data requiring login). The skill stores outputs and reports under /tmp/bilibili-data, which is expected but accessible to other local users/processes on multi-user systems.
✓ 持久化与权限
always is false and the skill does not request system-wide persistence or modify other skills' configs. It writes only to its own /tmp/bilibili-data directory (normal for a reporting tool).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/1
B站UP主成长助手 v1.0.0 首次发布： - 提供B站热门视频实时监控和报告生成功能 - 支持UP主粉丝趋势、内容风格和增长分析 - 实现单视频数据分析，包括播放、互动、弹幕热词等 - 基于数据和竞品分析，自动给出内容策划建议 - 可生成B站运营日报和周报 - 已验证兼容 macOS 平台和 OpenClaw
● 可疑
安装命令
点击复制官方npx clawhub@latest install bilibili-up-master
镜像加速npx clawhub@latest install bilibili-up-master --registry https://cn.longxiaskill.com