bilibili-viral-topic
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on a local Python script
scripts/search_bilibili_viral_topic.pyto handle data collection, scoring, and output formatting. - [EXTERNAL_DOWNLOADS]: Performs network requests to
api.bilibili.comto retrieve video metadata, search results, and ranking lists. - [DATA_EXPOSURE]: The script reads the
BILIBILI_COOKIEenvironment variable if provided by the user to mitigate rate-limiting on Bilibili's platform. - [DATA_EXPOSURE]: Manages a local JSON cache at
~/.cache/account-growth/bilibili_followers.jsonto store follower counts for up to 24 hours. - [INDIRECT_PROMPT_INJECTION]: Processes untrusted data (video titles, author names, and descriptions) from the Bilibili API which is then presented to the user or agent.
- Ingestion points: Data is fetched via
fetch_searchandfetch_rankingsinscripts/search_bilibili_viral_topic.py. - Boundary markers: No explicit delimiters are used to separate API content from the prompt context.
- Capability inventory: The script has permissions for network operations (GET requests) and local file system writes (cache file).
- Sanitization: Uses a
strip_htmlfunction to remove basic HTML tags from API responses.
Audit Metadata