bilibili-video-downloader
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local Python script
scripts/downloader.pyto process user input and coordinate API requests. - [EXTERNAL_DOWNLOADS]: The Python script makes outbound network requests to
https://redfox.hk/story/api/parseWork/videoDownload/bilibilito retrieve video download links and metadata. - [CREDENTIALS_UNSAFE]: The skill manages an API key (
REDFOX_API_KEY) used for authentication with the RedFox service. It supports reading the key from environment variables or a local JSON configuration file at~/.qoder/apis/redfox.json. The script correctly applies restricted file permissions (chmod 600) to this configuration file to protect the credential.
Audit Metadata