bili-ai-feed

SUSPICIOUS: the skill’s general purpose is coherent, but trust and data-flow integrity are weakened by routing through a third-party provider with inconsistent auth documentation and unclear official Bilibili endpoint support. No confirmed malware or download-execute behavior is present, but the credential path and mandatory broad web research make this a medium-risk skill.