Is jianguo99/bilibili-update-viewer safe?
Yes. jianguo99/bilibili-update-viewer is safe to install. Oathe's behavioral security audit gave the bilibili-update-viewer skill by jianguo99 a trust score of 89/100 with 4 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/jianguo99/bilibili-update-viewer
Is jianguo99/bilibili-update-viewer safe to install?
This skill appears to be a legitimate tool for checking Bilibili content creator updates, with functionality that matches its description. The primary security concern is the requirement for user authentication cookies, which poses a moderate risk if compromised. The code appears benign and focused on its stated purpose.
What security issues were found in jianguo99/bilibili-update-viewer?
Category Scores
Findings (4)
MEDIUM Requires User Authentication Cookies -15 ▶
The skill requires users to provide their Bilibili.com authentication cookies via the BILIBILI_COOKIES environment variable. While this is necessary for the skill's functionality, it represents a potential security risk if the cookies are compromised or misused.
LOW Executable Python Code with Network Requests -10 ▶
The skill contains Python code that makes HTTP requests to external Bilibili API endpoints. While the code appears legitimate, any executable code represents potential risk.
LOW Local Data Caching -10 ▶
The skill creates and maintains a local cache file (user_cache.json) to store user information, which could potentially contain sensitive data.
LOW External API Communication -5 ▶
The skill makes requests to external Bilibili API endpoints using user credentials, which could potentially be intercepted or logged.
Should I install jianguo99/bilibili-update-viewer?
Oathe's verdict for jianguo99/bilibili-update-viewer is SAFE with a trust score of 89/100. Recommendation: Install with caution.