bilibili-hot-monitor Security Audit Report
bilibili-hot-monitor is an AI agent skill, created by jacobzwj and published at openclaw/skills. ClawSecure audited bilibili-hot-monitor across 11 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 15 findings concentrate in Data Exfiltration, Obfuscation and Policy Violation, including Pattern detected: requests.post( and Script accesses environment variables and makes network calls in.... 6 were rated high or critical severity.
Is bilibili-hot-monitor safe?
ClawSecure audited bilibili-hot-monitor and assigned a security score of 0/100 (High Risk), identifying 15 findings across Data Exfiltration and Obfuscation. Review the findings below before installing.
What did ClawSecure find in bilibili-hot-monitor?
ClawSecure identified 15 findings in bilibili-hot-monitor, concentrated in Data Exfiltration, Obfuscation and Policy Violation. 6 were rated high or critical severity. The most severe include Pattern detected: requests.post( and Script accesses environment variables and makes network calls in....
How was bilibili-hot-monitor audited?
ClawSecure ran bilibili-hot-monitor through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 11 files from openclaw/skills.
What does a score of 0 mean?
ClawSecure assigned bilibili-hot-monitor a security score of 0/100, placing it in the High Risk range. This is driven by 15 findings led by Data Exfiltration that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for bilibili-hot-monitor
ClawSecure detected 15 security findings in bilibili-hot-monitor, spanning Data Exfiltration, Obfuscation, Policy Violation and Unauthorized Tool Use.
- critical · Pattern detected: requests.post(. Data Exfiltration finding detected in
generate_report.py:47. - critical · Script accesses environment variables and makes network calls in.... Data Exfiltration finding detected in
/tmp/url-scans/1fbb4d348d15a50c/generate_report.py. - critical · Multi-file exfiltration chain detected: send_email.py,.... Data Exfiltration finding.
- critical · Environment variable access with network calls in send_email.py,.... Data Exfiltration finding.
- high · Pattern detected: xor. Obfuscation finding detected in
bilibili_subtitle.py:23. - high · Pattern detected: xor. Obfuscation finding detected in
bilibili_subtitle.py:27. - medium · Pattern detected: import requests. Data Exfiltration finding detected in
bilibili_api.py:23. - medium · Pattern detected: import requests. Data Exfiltration finding detected in
bilibili_subtitle.py:10. - medium · Pattern detected: import requests. Data Exfiltration finding detected in
generate_report.py:21. - medium · Skill code uses network libraries but doesn't declare network.... Unauthorized Tool Use finding.
- medium · Script iterates through environment variables in.... Data Exfiltration finding detected in
/tmp/url-scans/1fbb4d348d15a50c/send_email.py. - medium · Script iterates through environment variables in.... Data Exfiltration finding detected in
/tmp/url-scans/1fbb4d348d15a50c/generate_report.py.
Showing the 12 highest-severity of 15 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for bilibili-hot-monitor
Audit external network connections
Review obfuscated or hidden code
Resolve policy violations
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on February 9, 2026. bilibili-hot-monitor is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.