Caveat verdict

bili-summary

88
šŸŸ¢ Trusted
No high-risk patterns surfaced by the deep scan ā€” automated capability review, not behavioral proof.

Accesses credentials AND writes files

Bilibili video download and Whisper transcription skill that sends transcript text to the Google Gemini API (disclosed, requires user-set GEMINI_API_KEY) for summarization, which is the stated purpose.

Automated static analysis ā€” not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.

0
security
40
transparency
70
maintenance

What it does

These are capability combinations: each listed behavior occurs in the skill, but Caveat detects co-occurrence ā€” it does not verify that one flows into another. Read the code to confirm a live chain.

Capability combination high

Accesses credentials AND writes files ā€” may persist stolen credentials locally

LLM02 Ā· LLM06 Ā· ASI03

Permission integrity

Performs file operations but does not declare file-accessing binaries

file_read+write

Code accesses API keys/tokens but declares no environment variables

credential_access

Installs packages at runtime ā€” transitive dependencies are not auditable

package_install

Findings (6)

Pattern match critical

Possible hardcoded credential

SKILL.md Ā· code Ā· API_KEY="your-api-key-here

Pattern match high

References sudo ā€” requests elevated privileges

SKILL.md Ā· code Ā· sudo

Pattern match high

Accesses shell history/config

SKILL.md Ā· code Ā· ~/.zshrc

Pattern match medium

subprocess execution ā€” runs system commands from Python

scripts/bili-summary.py Ā· prose Ā· downgraded Ā· subprocess.run(

Pattern match low

Python urllib.request ā€” network access

scripts/bili-summary.py Ā· prose Ā· downgraded Ā· urllib.request

Pattern match low

Python os.environ.get ā€” reads environment variable

scripts/bili-summary.py Ā· prose Ā· downgraded Ā· os.environ.get(

Why the tier is capped

Execution sink present in raw bytes (Hard Floor: class D/F). Final tier capped at Caution ā€” cannot be lifted by any downgrade, example-payload opt-in, or allowlist.

Permissions & capabilities

No declared permissions ā€” minimal attack surface.

package_installfile_writecredential_access
Check another skill Browse the registry Auditing your own skills or configs? Use the API