Catalogskills.sh · 958877748

bilibili-downloader

Download Bilibili videos. Extracts video and audio streams separately.

Review advisedVerified hub563 installs

Savant verdict: Review advised

Security analysis or source-hub review identified patterns requiring attention.

Live evaluation

Not evaluated yet. Workspaces can request a live evaluation.

Security assessment

Risk score
16/100
Recommendation
CAUTION
Severity
LOW
Savant decision
Passed (low risk)
The assessment recommended caution, but its risk score is below 20/100, so Savant's policy passes it. Its findings are still listed for review. Static security analysis completed.

3 patterns found

  • MCP Least Privilege: Skill declares no tool scope ('permissions' or 'allowed-tools') but code capabilities were detected: network.medium · SKILL.md:1 · Without declared permissions the skill's intent is opaque and cannot be validated.
  • Data Exfiltration: https://api.bilibili.com/medium · download.cjs:81 · Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
  • Data Exfiltration: https://api.bilibili.com/medium · download.cjs:109 · Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Structure

  • Ships 1 executable scriptdownload.cjs. Review what they do before enabling the skill for agents with tool access.
  • No license declaredConfirm you may reuse this skill before importing it into your repository.
  • The source hub's security checks flagged this skillSocket: warn (1 alert: gptAnomaly); Snyk: warn (Risk: MEDIUM · 1 issue); Runlayer: warn (2/2 files flagged)

SKILL.md

---
name: bilibili-downloader
description: Download Bilibili videos. Extracts video and audio streams separately.
---

## 目录结构

```
bilibili-downloader/
├── SKILL.md
└── download.cjs
```

## Usage

download.cjs <video_url> <save_directory>

## Arguments

- `video_url`: Bilibili video URL or BV number (e.g., `https://www.bilibili.com/video/BV1xxxxx` or `BV1xxxxx`)
- `save_directory`: Directory to save downloaded files

## Output

Downloads two files:
- `{BV号}_video.mp4` - Video stream
- `{BV号}_audio.mp4` - Audio stream

## Error Codes

- `无效的BV号或URL格式` - Invalid URL/BV number
- `视频不存在或已被删除` - Video not found
- `视频访问受限` - Access denied
- `没有可用的视频流` - No video streams available
- `下载失败` - Download failed (network error)