playlet-bili-feed

SUSPICIOUS. The skill's behavior matches its stated purpose, but it depends entirely on an unofficial third-party API gateway with limited public verification and routes credentials/data through that domain instead of official Bilibili endpoints. No malware indicators or dangerous installers are present, but the trust and data-flow model is only moderately credible.