← 返回 Skills 市场
volcengine-skills

Byted Las Audio Convert

作者 volcengine-skills · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
139
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install byted-las-audio-convert
功能描述
Converts and transcodes audio file formats and encoding parameters using Volcengine LAS. Audio format conversion between wav, mp3, flac, m4a, ogg, aac and ot...
使用说明 (SKILL.md)

LAS 音频格式转换(las_audio_convert

将 TOS 上的音频文件转换为指定格式(wav/mp3/flac),可通过 extra_params 传入 ffmpeg 参数调整采样率、声道数等。

设计模式

本 skill 主要采用:

  • Tool Wrapper:封装 lasutil CLI 调用
  • Pipeline:包含 Step 0 → Step N 的顺序工作流

核心 API 与配置

  • 算子 ID: las_audio_convert
  • API: 同步(process
  • 环境变量: LAS_API_KEY (必填)

详细参数与接口定义见 references/api.md

Gotchas

  • 密钥安全:若聊天框屏蔽密钥,让用户在当前目录创建 env.sh 并写入 export LAS_API_KEY="...",SDK 会自动读取。
  • 免责声明:最终回复结果时必须包含:"本方式的计费均为预估计费,与实际费用有差距,实际费用以运行后火山产生的账单为准。计费说明请参考 Volcengine LAS 定价。",且禁止使用"实际费用"字眼描述预估价。

工作流(严格按步骤执行)

复制此清单并跟踪进度:

执行进度:
- [ ] Step 0: 前置检查
- [ ] Step 1: 初始化与准备
- [ ] Step 2: 预估价格
- [ ] Step 3: 执行/提交任务
- [ ] Step 4: 结果呈现

Step 0: 前置检查(⚠️ 必须在第一轮对话中完成)

在接受用户的任务后,不要立即开始执行,必须首先进行以下环境检查:

  1. 检查 LAS_API_KEYLAS_REGION:确认环境变量或 .env 中是否已配置。
    • 若无,必须立即向用户索要(提示:LAS_REGION 常见为 cn-beijing)。
    • 注意LAS_REGION 必须与您的 API Key 及 TOS Bucket 所在的地域完全一致。如果用户中途切换了 Region,必须提醒用户其 TOS Bucket 也需对应更换,否则会导致权限异常或上传失败。
  2. 检查输入路径
    • 如果用户要求处理的是本地文件,则需要先通过 File API 上传至 TOS(只需 LAS_API_KEY,无需额外 TOS 凭证)。
    • 如果算子的输出结果存放在 TOS 上,且用户需要下载回本地,则需要 VOLCENGINE_ACCESS_KEYVOLCENGINE_SECRET_KEY。对于仅需要上传输入文件的场景,TOS 凭证不再必须
  3. 确认无误后:才能进入下一步。

Step 1: 初始化与准备

环境初始化(Agent 必做)

# 执行统一的环境初始化与更新脚本(会自动创建/激活虚拟环境,并检查更新)
source "$(dirname "$0")/scripts/env_init.sh" las_audio_convert
workdir=$LAS_WORKDIR

如果网络问题导致更新失败,脚本会跳过检查,使用本地已安装的 SDK 继续执行。

  • 处理本地文件时:先本地检查格式和时长,预估价格,用户确认后再上传:
    # 提前检查容器格式(避免参数错误)
    ./scripts/check_format.sh \x3Clocal_path>
    # 本地使用 ffprobe 获取时长(无需上传即可预估价格)
    duration_sec=$(ffprobe -v error -show_entries format=duration -of default=noprint_wrappers=1:noprint_section=1 \x3Clocal_path>)
    
    计算预估价格并等待用户确认后,再执行上传:
    # 用户确认后,上传到 TOS
    lasutil file-upload \x3Clocal_path>
    
    上传成功后返回 JSON,取其中的 tos_uri(格式 tos://bucket/key)传给算子作为输入路径。

Step 2: 预估价格(⚠️ 必须获得用户确认)

  1. 读取 references/prices.md 获取最新计费标准。
  2. 优先本地获取时长(避免不必要上传):
    # 使用 ffprobe 本地获取
    duration_sec=$(ffprobe -v error -show_entries format=duration -of default=noprint_wrappers=1:noprint_section=1 \x3Clocal_path>)
    
    如果 ffprobe 失败,再使用 lasutil 远程获取:
    lasutil media-duration \x3Cinput_audio_url>
    
  3. 根据时长和模型单价计算总价,将计费单价与预估总价一并告知用户并强制暂停执行,明确等待用户回复确认。在用户明确回复"继续"、"确认"等同意指令前,绝对禁止进入下一步(执行/提交任务)。提示:预估仅供参考,实际以火山账单为准。计费说明请参考 Volcengine LAS 定价

Step 3: 执行转换 (Process)

构造基础 data.json(仅需必填项,高级用法可在其中加 "extra_params": ["-ar", "44100", "-ac", "1"]):

{
  "input_path": "\x3Cpresigned_url>",
  "output_path": "tos://bucket/output.wav",
  "output_format": "wav"
}

执行命令:

data=$(cat "$workdir/data.json")
lasutil process las_audio_convert "$data" > "$workdir/result.json"

结果呈现

使用脚本自动生成结果展示(自动包含计费声明):

./scripts/generate_result.md.sh $workdir/result.json \x3Cestimated_price>

生成内容包含:

  • 任务信息卡片
  • 自动生成转换结果表格
  • 自动包含计费声明

手动提取方式:

jq '[.data.audios[] | {
  input: (.input_path | split("/") | last),
  output: .output_path,
  duration: "\(.duration)s",
  status: .status
}]' result.json

如果 statusfailed,标记为 ❌ 并提示用户检查输入格式。

审查标准

执行完成后,Agent 应自检:

  1. 环境变量是否正确配置
  2. 输入文件是否成功上传
  3. 输出结果是否正确呈现给用户
  4. 计费声明是否包含
安全使用建议
This skill appears to legitimately wrap Volcengine LAS audio conversion, but there are transparency and supply-chain concerns you should address before installing or running it: - The SKILL.md requires LAS_API_KEY and LAS_REGION, and may require VOLCENGINE_ACCESS_KEY/VOLCENGINE_SECRET_KEY for some workflows, but the registry metadata lists no required env vars. Expect to provide cloud credentials if you run it. - The initialization script (scripts/env_init.sh) fetches a remote manifest and pip-installs a .whl from https://las-ai-cn-beijing-online.tos-cn-beijing.volces.com/. That means code will be downloaded and executed at runtime — treat this like installing third-party software. If you must run it, do so in a disposable sandbox or VM. - The scripts assume binaries (lasutil, ffprobe, jq, python3) are available; the skill metadata does not declare these dependencies. Make sure those binaries are present and trusted or run in an environment where you control them. - If you plan to provide API keys: only provide the minimum-scoped credentials, and avoid using highly privileged keys on sensitive machines. Consider creating a dedicated LAS key with restricted permissions and verifying which operations require VOLCENGINE access keys. - If you want to install safely: inspect the remote manifest and the wheel before execution (download the .whl manually, inspect contents, check signatures or checksums if available), or ask the skill author/owner for the upstream source and a signed release. Ask the publisher to update the registry metadata to list required env vars and binaries and to host the SDK/wheels on a well-known release channel. Given the inconsistencies and the remote pip install behavior, treat this skill as suspicious until metadata and install behavior are clarified or you vet the remote wheel and manifest.
功能分析
Type: OpenClaw Skill Name: byted-las-audio-convert Version: 1.0.1 The skill performs remote installation of a Python wheel file from a Volcengine domain (volces.com) within `scripts/env_init.sh`, which represents a supply chain risk through remote artifact execution. Additionally, `SKILL.md` contains instructions for the agent to guide users in bypassing chat-based secret redaction by writing API keys directly to a local `env.sh` file. While these actions appear aligned with the stated purpose of using Volcengine LAS services, the combination of remote code execution and sensitive credential handling meets the threshold for a suspicious classification.
能力标签
requires-sensitive-credentials
能力评估
Purpose & Capability
The skill's purpose (audio format conversion using Volcengine LAS) matches the instructions and helper scripts. However, the registry metadata claims no required env vars or binaries while the SKILL.md and scripts require LAS_API_KEY (and reference LAS_REGION) and rely on tools such as lasutil, ffprobe, jq and python3/venv. The missing declarations are an incoherence: a conversion skill reasonably needs an LAS API key and CLI/tools, so the metadata should list them.
Instruction Scope
SKILL.md instructs the agent to: check and ask the user for LAS_API_KEY and LAS_REGION, upload local files via lasutil, use ffprobe to read durations, call lasutil process, and source scripts/env_init.sh which fetches a remote manifest and may install/update an SDK. Those runtime steps include network fetches and an installation step that goes beyond simple API calls. The instructions also state that some operations may require VOLCENGINE_ACCESS_KEY and VOLCENGINE_SECRET for retrieving outputs — credentials not declared in metadata. The skill asks the agent to read/write env files and run shell scripts that perform network operations; this broad scope should be made explicit to users.
Install Mechanism
There is no formal install spec, but scripts/env_init.sh fetches a manifest from https://las-ai-cn-beijing-online.tos-cn-beijing.volces.com/ and then does pip install --upgrade of a .whl from that same host. A remote wheel install is a supply-chain risk because it executes code from a remote server at runtime. The URL is not a standard public release host like GitHub releases; it's a service-specific domain. This behavior is not declared in the registry install metadata and increases risk.
Credentials
The SKILL.md explicitly requires LAS_API_KEY (and references LAS_REGION). It also explains scenarios where VOLCENGINE_ACCESS_KEY and VOLCENGINE_SECRET_KEY are necessary to download outputs. The registry metadata however lists no required environment variables or primary credential. Requesting cloud API keys is proportionate to a cloud conversion service, but the omission in metadata and the conditional need for additional VOLCENGINE credentials (not declared) is a transparency problem and could lead to unexpected credential exposure.
Persistence & Privilege
The skill is not marked always:true and does not request system-wide persistent privileges in the manifest. Its env_init.sh creates/uses a virtual environment (.las_venv) and a temporary LAS_WORKDIR; these are local to the project and ephemeral. Autonomous invocation is allowed by default but is not combined with other high-risk flags here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install byted-las-audio-convert
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /byted-las-audio-convert 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
byted-las-audio-convert 1.0.1 - Added new documentation and workflow guidelines to support safer, more transparent audio format conversion. - Introduced detailed step-by-step process, including environment checks, price estimation, and user confirmation before execution. - Added scripts for environment initialization, format checks, automated result reporting, and evaluation. - Included explicit handling of cloud credentials and security best practices. - Provides mandatory billing disclaimer and expanded support for various audio formats and ffmpeg options.
v1.0.0
- Initial release of byted-las-audio-convert skill. - Provides audio format conversion between wav, mp3, and flac. - Allows customization of audio properties using ffmpeg parameters. - Supports reading from and writing to TOS storage. - Requires LAS_API_KEY for authentication.
元数据
Slug byted-las-audio-convert
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Byted Las Audio Convert 是什么?

Converts and transcodes audio file formats and encoding parameters using Volcengine LAS. Audio format conversion between wav, mp3, flac, m4a, ogg, aac and ot... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 139 次。

如何安装 Byted Las Audio Convert?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install byted-las-audio-convert」即可一键安装,无需额外配置。

Byted Las Audio Convert 是免费的吗?

是的,Byted Las Audio Convert 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Byted Las Audio Convert 支持哪些平台?

Byted Las Audio Convert 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Byted Las Audio Convert?

由 volcengine-skills(@volcengine-skills)开发并维护,当前版本 v1.0.1。

💬 留言讨论