← Back to Skills Marketplace
aoturlab

bilibit

by Roland Dickens · GitHub ↗ · v0.1.11 · MIT-0
cross-platform ⚠ suspicious
254
Downloads
0
Stars
1
Active Installs
11
Versions
Install in OpenClaw
/install bilibit
Description
B 站视频下载工具。支持哔哩哔哩视频下载、弹幕下载。用户说"B 站下载"、"哔哩哔哩"、"bilibili"时使用。无需 API Key。纯下载工具,不支持搜索。
README (SKILL.md)

🎬 bilibit - B 站视频下载专家

极简 B 站视频下载工具。粘贴 URL,一键下载视频和弹幕。


📦 快速安装

# clawhub
clawhub install bilibit

# npm
npm install -g bilibit

🚀 使用示例

下载视频

bilibit https://b23.tv/BV1xx

下载带弹幕

bilibit https://b23.tv/BV1xx --danmaku

💬 AI 交互规范(重要!)

触发场景

当用户说这些话时,使用 bilibit

  • "下载这个 B 站视频" + URL
  • "B 站下载"
  • "哔哩哔哩视频"
  • "下载弹幕"

不支持的场景

  • ❌ "搜索 B 站视频" - bilibit 不支持搜索,需要用户提供 URL
  • ❌ "找某个 UP 主的视频" - 不支持搜索,需用户先在 B 站找到 URL

输出格式规范

输出格式规范

📺 下载完成!已保存到:xxx

📌 回复序号查看历史

禁止行为

  • ❌ 不要转成表格格式
  • ❌ 不要重新排序
  • ❌ 不要用 []() 包裹 URL

必须保留

  • ✅ 原始输出格式
  • ✅ 下载完成提示

📋 完整命令

命令 说明 示例
bilibit \x3Curl> 下载视频 bilibit https://b23.tv/BV1xx
bilibit \x3Curl> --danmaku 下载 + 弹幕 bilibit ... --danmaku
bilibit \x3Curl> --quality 4K 指定画质 bilibit ... --quality 4K
bilibit history 下载历史 bilibit history

⚠️ 注意事项

  • 仅限个人学习使用
  • 大会员画质需要 Cookie
  • 弹幕保存为 XML 格式

🔗 相关链接

Usage Guidance
This package appears to be a coherent Bilibili downloader. Before installing, note: (1) npm postinstall will try to download and extract an official BBDown release (curl + unzip) into node_modules/.bin — review scripts/install-bbdown.js if you want to confirm behavior; (2) it will create a history file at ~/.bilibit/history.json; (3) it accepts an optional cookie file (user-supplied) for premium-quality downloads — do not provide secrets you don't trust; (4) minor doc inconsistencies exist (mentions of a 'search' command and mismatched version numbers across files) but these are documentation/versioning issues, not indicators of malicious behavior. If you trust the GitHub repo link and are comfortable with the package running a postinstall download, installation is reasonable. If concerned, inspect the install script and download URLs yourself or run in an isolated environment.
Capability Analysis
Type: OpenClaw Skill Name: bilibit Version: 0.1.11 The skill bundle exhibits high-risk behaviors and vulnerabilities, though no clear evidence of intentional malice was found. Specifically, 'bin/bbdown-wrapper.js' is vulnerable to shell injection because it uses 'spawnSync' with 'shell: true' on user-provided arguments. Additionally, 'scripts/install-bbdown.js' performs a risky 'postinstall' operation by automatically downloading and executing a binary from an external GitHub repository (nilaoda/BBDown). The 'scripts/check-deps.js' file also attempts to run 'sudo' commands for dependency management, which is a high-privilege operation.
Capability Tags
requires-sensitive-credentials
Capability Assessment
Purpose & Capability
Name/description (B 站 video + danmaku downloader) align with code: CLI parses a URL, calls a BBDown wrapper to fetch/download, and records local history. Required binaries (BBDown, ffmpeg) are appropriate for downloading and merging media.
Instruction Scope
SKILL.md and CLI focus on URL-driven downloads and history. Minor scope inconsistency: several help messages and examples mention a 'search' command, but no search implementation exists in the code (product docs note search was intentionally removed). The CLI only reads a user-supplied cookie file if provided and writes local history (~/.bilibit/history.json). No instructions access unrelated system credentials or unexpected endpoints.
Install Mechanism
This is an instruction-only skill in registry, but package.json includes a postinstall script (scripts/install-bbdown.js) that downloads BBDown from GitHub releases (official repo URLs) using curl and unzip and writes the binary to node_modules/.bin. Downloading a release and extracting to disk is expected for this purpose but is a higher-risk install action than pure instruction-only packages; the URLs point to the official BBDown GitHub releases (not a random host).
Credentials
No environment variables or secret credentials are required. The code uses HOME/USERPROFILE to store history and an optional user-provided cookie file for premium downloads — this is proportional and documented. No evidence of exfiltration or access to unrelated secrets.
Persistence & Privilege
always:false and normal model invocation. The package writes a local history file under the user's home (~/.bilibit) and installs BBDown into node_modules/.bin during postinstall; it does not modify other skills or system-wide agent settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install bilibit
  3. After installation, invoke the skill by name or use /bilibit
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.11
fix: 修正clawhub显示名称
v0.1.10
docs: 添加MIT LICENSE文件
v0.1.9
chore: 添加version和license字段
v0.1.8
fix: 更新GitHub链接为AoturLab
v0.1.7
fix: BBDown下载链接+解压+参数修复
v0.1.6
fix: BBDown下载链接+解压+参数修复
v0.1.4
v0.1.4 - 明确纯下载定位,移除搜索功能描述
v0.1.3
bilibit v0.1.3 - 更新 SKILL.md,精简描述
v0.1.2
bilibit v0.1.2 - 精简功能,专注 URL 下载,移除搜索功能
v0.1.1
bilibit v0.1.1 - 自动安装 BBDown,用户无需手动安装
v0.1.0
bilibit v0.1.0 首发 - B 站视频下载专家,支持搜索、下载、弹幕下载、BBDown 自动安装
Metadata
Slug bilibit
Version 0.1.11
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 11
Frequently Asked Questions

What is bilibit?

B 站视频下载工具。支持哔哩哔哩视频下载、弹幕下载。用户说"B 站下载"、"哔哩哔哩"、"bilibili"时使用。无需 API Key。纯下载工具,不支持搜索。 It is an AI Agent Skill for Claude Code / OpenClaw, with 254 downloads so far.

How do I install bilibit?

Run "/install bilibit" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is bilibit free?

Yes, bilibit is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does bilibit support?

bilibit is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created bilibit?

It is built and maintained by Roland Dickens (@aoturlab); the current version is v0.1.11.

💬 Comments