bilibili-research-kit — 哔哩哔哩研究

v1.0.0

基于 yt-dlp 一键提取并分析哔哩哔哩视频元数据、弹幕、字幕与 UP 主信息，自动生成结构化数据，助力内容研究与二次创作。

0· 94·0 当前·0 累计

by @xuya227939 (江辰)

视频平台内容平台数据与API

使用场景：下载B站视频获取弹幕数据B站数据分析

下载技能包

最后更新

2026/3/24

安全扫描

VirusTotal

可疑

查看报告

OpenClaw

可疑

high confidence

The skill's instructions mostly match its stated purpose (Bilibili extraction via yt-dlp), but the published metadata omits the required yt-dlp dependency and the runtime instructions advise exporting browser cookies (which can expose sensitive data) and linking to third-party download sites — these inconsistencies and privacy risks warrant caution.

评估建议

This skill appears to do what it says (use yt-dlp + curl to extract Bilibili metadata, subtitles and danmaku), but before using it: 1) Note the manifest did not declare yt-dlp as a required binary — install yt-dlp from an official source yourself (Homebrew or PyPI). 2) Be cautious with the suggested `--cookies-from-browser` command: exporting browser cookies can expose your logged-in sessions; only do this on a machine/account you trust and avoid sharing the exported cookie files. 3) The skill l...

详细分析 ▾

ℹ 用途与能力

The SKILL.md clearly describes a yt-dlp–based Bilibili extraction toolkit and requires yt-dlp >= 2024.01.01, but the registry metadata lists no required binaries or credentials. The declared manifest omits the one core runtime dependency (yt-dlp), which is an incoherence the user should notice before installing or invoking the skill.

ℹ 指令范围

Runtime instructions are focused on extracting metadata, subtitles, and danmaku via yt-dlp and curl (comment.bilibili.com). However the instructions recommend using `--cookies-from-browser` to access logged-in content — this interacts with local browser cookie stores and can expose session cookies. The SKILL.md also points users to a third-party site (snapvee.com) for downloads. These are within the skill's functional scope but carry privacy and trust implications that are not surfaced in the metadata.

ℹ 安装机制

There is no install spec (instruction-only), which minimizes supply-chain risk. However, the instructions require installing yt-dlp (brew/pip) — a dependency not declared in the skill's 'required binaries' metadata. That mismatch could confuse automated install tooling or less-technical users.

ℹ 凭证需求

The skill declares no required environment variables or credentials (good), but the instructions ask users to export browser cookies for member-only content. Accessing browser cookies is effectively credential access and can expose unrelated site credentials; this capability is not declared or explained in the metadata and may be disproportionate for users unaware of the risk.

✓ 持久化与权限

The skill is not marked 'always' and is user-invocable with normal autonomous invocation allowed. It does not request persistent presence or system-wide configuration changes in the manifest.

安全有层次，运行前请审查代码。

运行时依赖

无特殊依赖

版本

latestv1.0.02026/3/24

Initial release of Bilibili Research Kit for content extraction and analysis: - Extracts Bilibili video metadata, danmaku (bullet comments), subtitles, UP主 profile info, and series/collection data using yt-dlp. - Guides users through installation, video type detection, and command usage for various extraction tasks. - Handles multi-part videos, provides output formatting tips, and supports multiple Bilibili URL patterns. - Includes error handling for login, regional restrictions, and unavailable content. - Clarifies scope (not for video downloading) and provides alternative download suggestions.

● 可疑

安装命令

点击复制

官方npx clawhub@latest install bilibili-research-kit

镜像加速npx clawhub@latest install bilibili-research-kit --registry https://cn.longxiaskill.com 镜像可用

本土化适配说明

bilibili-research-kit — 哔哩哔哩研究安装说明：安装命令：npx clawhub@latest install bilibili-research-kit 该技能用于B站相关操作，可能需要相应的平台账号或API密钥

需要定制？告诉我你的需求 →

运行时依赖

版本

安装命令

本土化适配说明

相关技能推荐