← Back to Skills Marketplace
tencent-adm

WorkRally

by 腾讯开源 · GitHub ↗ · v2.3.1 · MIT-0
cross-platform ✓ Security Clean
198
Downloads
1
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install workrally
Description
WorkRally CLI (workrally) — 面向 AI Agent 的 AIGC 漫剧视频创作全流程工具集。 支持 AI 生图、AI 生视频、项目管理、资产库、媒资管理、无限画布、文件上传下载等。 Use when user asks to generate images, generate vide...
Usage Guidance
This skill appears coherent with its stated purpose, but before installing: 1) Verify the npm package provenance (publisher, package page, and checksum) to avoid a malicious package with the same name. 2) Use a scoped/minimally privileged WorkRally API key (rotate/revokeable) rather than broad or long-lived credentials. 3) Be aware the CLI persists the API key in a config file (default ~/.workrally/config.json or path set by WORKRALLY_CONFIG_DIR) — protect that file and avoid putting your API key in shared shells. 4) The CLI exposes a 'tools call' passthrough that can invoke many server-side actions — only grant the agent permission to run commands you expect. 5) If you have concerns about running third-party npm code, review the package source or run it in a restricted/sandboxed environment first.
Capability Analysis
Type: OpenClaw Skill Name: workrally Version: 2.3.1 The WorkRally skill bundle is a legitimate toolset for interacting with the WorkRally AIGC platform (workrally.qq.com) for video and image creation. The SKILL.md and reference documents provide clear, functional instructions for an AI agent to manage projects, upload assets, and use AI generation models. The instructions include safety-oriented rules, such as mandating the use of an internal URL builder to prevent malformed links and requiring dynamic model discovery. No evidence of data exfiltration, malicious persistence, or deceptive prompt injection was found.
Capability Tags
cryptocan-make-purchasesrequires-oauth-tokenrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
Name/description, required binary ('workrally'), required env vars (WORKRALLY_API_KEY, WORKRALLY_ENDPOINT, WORKRALLY_CONFIG_DIR, WORKRALLY_NO_UPDATE_CHECK) and declared primary credential all align with a CLI that communicates with the WorkRally service. The requested items are appropriate for a networked CLI client.
Instruction Scope
SKILL.md instructions are narrowly about installing/configuring the CLI and using its commands (project/canvas/asset/upload/generate/tools). There are no instructions to read unrelated local files or to exfiltrate data to third-party endpoints; external interaction is limited to WorkRally/CDN endpoints as expected. The CLI exposes a 'tools call' passthrough which legitimately grants broad server-side functionality — powerful but consistent with the described purpose.
Install Mechanism
Install uses npm package 'workrally' which is an expected and traceable distribution mechanism for a JS CLI. This is moderate risk compared to instruction-only skills because an npm install will place new code on disk — verify package provenance (registry, publisher) before installing.
Credentials
Requested environment variables and the described config file (~/.workrally/config.json or WORKRALLY_CONFIG_DIR) are proportionate: an API key, endpoint, and config location are needed by a CLI. No extraneous secrets (AWS, other tokens, passwords) are requested.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It documents persisting the API key to its own config file, which is normal for a CLI. There is no request to change other skills' configs or system-wide settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install workrally
  3. After installation, invoke the skill by name or use /workrally
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.3.1
- AI 生图支持 4K 分辨率 - 版本号由 2.3.0 升级到 2.3.1
v2.3.0
- 媒资 URL 短链化:`asset search` / `asset get` / `asset create` 等工具返回的 `url`、`download_url` 替换为短链形式,相较原始带签名地址最高可压缩 100 倍以上,显著节省 Agent 上下文 - 短链对 Agent 透明:可直接作为任意 URL 类参数传入生图/生视频/入库等工具,由服务端自动还原为原始地址,无需手动处理 - 短链访问失败体验优化:失效或格式非法的短链返回专属 404 页面(原地显示,URL 不跳转),命中时仍正常重定向到原始素材 - 命令帮助抽象化:SKILL 规则 9、各指南文档不再硬编码具体域名/URL 格式,平台侧调整对 Agent 使用完全透明 - 生图/生视频任务并发语义同步:`--count 1-4` 命令帮助文案明确"后端一个任务生成 1 张/个,count>1 会并发发起 N 个任务" - `workrally download` 对重定向响应更健壮:兼容相对路径 302,失效 URL 返回清晰的 HTTP 状态提示,不再静默保存错误响应 - 版本号由 2.2.0 升级到 2.3.0
v2.2.0
- 新增 URL 白名单规则(规则 9):所有 URL 类参数仅接受 zenvideo-pro.gtimg.com 域名,本地/第三方 URL 必须先 upload - 版本号由 2.1.0 升级到 2.2.0
v2.1.0
- 品牌重命名 ZenStudio → WorkRally,CLI 命令由 zencli 改为 workrally - 环境变量全面更新:ZENSTUDIO_* → WORKRALLY_*,旧变量保持兼容 - 新增 4 份深度指南:画布操作、上传资产、AI 生成、常见错误 - 修复 material add 文档与 CLI 实际接口不匹配 - 新增预发布品牌泄漏检测(源码 + 构建产物双层扫描) - 版本号由 1.3.6 升级到 2.1.0
Metadata
Slug workrally
Version 2.3.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 4
Frequently Asked Questions

What is WorkRally?

WorkRally CLI (workrally) — 面向 AI Agent 的 AIGC 漫剧视频创作全流程工具集。 支持 AI 生图、AI 生视频、项目管理、资产库、媒资管理、无限画布、文件上传下载等。 Use when user asks to generate images, generate vide... It is an AI Agent Skill for Claude Code / OpenClaw, with 198 downloads so far.

How do I install WorkRally?

Run "/install workrally" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is WorkRally free?

Yes, WorkRally is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does WorkRally support?

WorkRally is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created WorkRally?

It is built and maintained by 腾讯开源 (@tencent-adm); the current version is v2.3.1.

💬 Comments