bilibili-video-download

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell commands to manage environment checks, authentication status, and the download process. Evidence: references/command-recipes.md lists commands such as yutto auth status, mkdir -p, and various yutto download execution patterns.
  • [EXTERNAL_DOWNLOADS]: The skill installs its primary tool and dependencies from standard package managers. Evidence: references/command-recipes.md provides installation instructions for yutto using uv, pip, and brew.
  • [PRIVILEGE_ESCALATION]: Administrative rights are used to install system-level utilities. Evidence: references/command-recipes.md includes commands for sudo apt install ffmpeg and sudo pacman -S ffmpeg for Linux systems.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides guardrails for processing potentially malicious external content from Bilibili pages. Evidence: SKILL.md identifies Bilibili URL content as untrusted, identifies shell execution as a capability, and specifies that all inputs must be correctly escaped and never interpreted as instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:35 PM