bilibili-video-downloader

Warn

Audited by Socket on Jul 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's purpose matches video-link parsing, but its actual footprint centers on routing user URLs and API credentials through redfox.hk, an unrelated third-party intermediary rather than official Bilibili endpoints. There is no download-execute chain or obvious malware behavior, but the data-flow and trust model are not ideal and create medium security risk.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Jul 27, 2026, 01:34 PM
Package URL
pkg:socket/skills-sh/redfox-data%2Fredfox-community%2Fbilibili-video-downloader%2F@ff9c64e77e564d242aa7df18335e8cb3a58f6fbef212f0b75450597ebee36190
Security Audit — socket — bilibili-video-downloader