MCP server · Audited from source
dsh-bili-scroll MCP server
by c1overzz/dsh-bili-scrollMIT licenceAudited 26 Oct 2026 · source bdbcdaadaa78
Is it safe? No — BLOCK, grade D (69/100). It exposes 13 tools: 11 read, 2 write and 0 destructive. The audit recorded 6 findings (0 critical, 2 high, 1 medium, 2 low). Maintainer's description: DSH 插件:每天替你刷一轮 B站,读字幕挑出值得的、写一份日报,值得的 @ 你
Cite
Cite this page
ModelsAtlas. “dsh-bili-scroll MCP server (c1overzz/dsh-bili-scroll)”. Retrieved 26 Oct 2026. https://modelsatlas.com/mcp/c1overzz/dsh-bili-scroll
Why this is BLOCK. The audit found 0 critical and 2 high findings; the most severe is Prompt injection at CHANGELOG.md:64. Each finding is listed below with its file and line.
Why this page is still public. People search for this server by name. Hiding it would leave them with the README's word alone; here they see what the code does. We list it so you can decide, and we do not show connect commands for BLOCK servers.
Trust audit
Audit 0.4.1 · full source read 26 Oct 2026
6 findings, listed below with the file and line each was found on. Grade A needs a sandboxed behavioural run too; this audit read the source only.
What the source does
- FilesystemDeclared3 observations
- NetworkDeclared6 observations
- ShellDeclared2 observations
- DependenciesNot pinnedSome ranges float
- SecretsNone foundNo keys in source
Findings (6)
Sorted by severity
HIGHPrompt injectionprompt.zero_width · CHANGELOG.md:64
```
- Why
- invisible characters in instruction text
- Fix
- strip non-printing characters
HIGHPrompt injectionprompt.zero_width · CHANGELOG.md:66
```
- Why
- invisible characters in instruction text
- Fix
- strip non-printing characters
MEDIUMNetwork egressnet.raw_ip · index.js:2975
try { await handle(req, res, new URL(req.url, 'http://127.0.0.1')) } catch (err) {- Why
- No further detail recorded for this rule.
- Fix
- —
LOWSupply chainsupply.unpinned · package.json
@deepseek-ai/schemastery
- Why
- 1 dependency range(s) float
- Fix
- pin exact versions or ship a lockfile
LOWSupply chainsupply.unpinned · vendor/bilibili-mcp/requirements.txt
bilibili-api-python, aiohttp, mcp, qrcode, Pillow
- Why
- 5 requirement(s) not pinned with ==
- Fix
- pin exact versions
INFOPrompt injectionprompt.persistence · README.md:35
- 只有 Python 也行(装官方安装器时记得勾 **`Add to PATH`**);
- Why
- instructs the agent to persist itself in the user's environment
- Fix
- —
Tools it exposes
13 declared in source · 0 destructive
| Tool | What it does | Risk |
|---|---|---|
bili_login_start | 开始 B站 扫码登录:出二维码(画成 PNG 存在插件家目录里,返回路径)和一个 key。\n | write |
bili_run | **立刻跑一轮**(不等窗口):起一个 headless 会话,把 duty.md 交给它去刷、写报告。 | write |
bili_comments | 取一个视频的热门评论(含点赞/回复数)。刷一轮时顺手翻一眼,看值不值得占用使用者一次注意力。 | read |
bili_config | 读 / 改「刷B站」的设置。不给 | read |
bili_cover | 看一个视频的封面(等比缩到 512px 宽)。最便宜的一档 | read |
bili_frames | 看视频里的画面(从 B 站自带的故事板裁 1-6 帧,每帧 480×270)。\n | read |
bili_login_poll | 查扫码结果:waiting 还没扫 / scanned 扫了待确认 / ok 成功 / expired 过期。 | read |
bili_reply | 在视频下发评论(或回复某条评论)。这就是 | read |
bili_search | 搜 B站 视频(可排序)。返回标题 / BV号 / 播放量 / UP / 时长 等。\n | read |
bili_setup | 给刷B站装运行环境:在插件家目录建一个**独立 venv**、装上那个 Python MCP 的依赖,装完自动把 | read |
bili_status | 看它今天的状态:跑了没跑、挑了几条、额度剩多少、报告在哪、登录过没有、下次窗口什么时候开。 | read |
bili_subtitle | 取一个视频的字幕(AI 字幕)全文。**判断内容就靠它** —— 没有字幕时, | read |
bili_whoami | 看 B站 那边登录的是谁(凭证是否有效、昵称、mid)。第一次用要先在「刷B站」设置页里扫码登录。 | read |
Safer alternatives
GuionAI/web
A web research toolkit with multi-provider search and clean Markdown extraction from static and JavaScript-rendered pages, plus public code and library docs search—available via CLI and MCP.
263311487-ux/dsh-verify
Browser acceptance checks for agent-built web apps. Zero-key starter, CLI, MCP and GitHub Action; inspect explicit assertions and reports.
RavenWangChina/yuanzhu
Meta-Forge Workshop: turn recurring work into governed AI workflow assets. MCP server + Claude Code plugin + dsh plugin — staged writes, evals-gated forging, inference engine. 元铸工坊 SOSOFAST:把最佳实践铸成可治理的 AI 工作流资产
Audit history
- ✕BLOCK D 69 / 100
First audit ·
bdbcdaadaa78
README badge
Badges show the current verdict, BLOCK included
A badge cannot be hidden by the maintainer while the verdict is BLOCK. Fix the findings, push, and the re-audit updates it.
Questions about dsh-bili-scroll MCP server
What is the dsh-bili-scroll MCP server?
What tools does dsh-bili-scroll expose?
Is dsh-bili-scroll safe to connect to an agent?
What credentials does dsh-bili-scroll need?
How does dsh-bili-scroll run?
How current is this page?
I already installed dsh-bili-scroll. What should I do?
Can the verdict change?
Sources
- c1overzz/dsh-bili-scroll on GitHub — the source we read, its licence, stars and activityObserved · 26 Oct 2026
- ModelsAtlas trust audit — BLOCK verdict for commit bdbcdaadaa78Observed · 26 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What is the dsh-bili-scroll MCP server?
- What tools does dsh-bili-scroll expose?
- Is dsh-bili-scroll safe to connect to an agent?