← 返回 Skills 市场
tencent-mpaas-skills

Tencent MPS Intl.

作者 tencent-mpaas-skills · GitHub ↗ · v1.1.7 · MIT-0
cross-platform ⚠ suspicious
65
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install tencent-mps-intl
功能描述
Tencent Cloud MPS: [Transcode] transcode/compress/H.264/H.265/AV1/MP4/AVI/MKV/FLV/MOV/bitrate/resolution/fps. [Enhance] quality-enhance/restore/super-res/ant...
安全使用建议
This bundle appears to be real Tencent MPS client code, but you should be careful before installing or using it. Specific points to consider: - Do NOT paste your cloud credentials into chat. SKILL.md explicitly suggests the assistant can help configure credentials if you 'send the variable values directly in the conversation' — that is unsafe. Provide credentials only via secure environment variables on your system or a credential manager, never as chat text. - The registry metadata omits required env vars (TENCENTCLOUD_SECRET_ID / TENCENTCLOUD_SECRET_KEY and optional COS settings). Treat that as a packaging oversight and verify required environment variables yourself before use. - Inspect mps_load_env.py (and any code paths that read /etc/profile, ~/.profile, /etc/environment) to see exactly what files it reads and whether it uploads or prints their contents. If you don't want the skill to search system files, do not run those helper functions or run the scripts in a sandboxed account. - Limit credential permissions: create a dedicated Tencent Cloud API key with the minimum MPS/COS permissions required and rotate/revoke it if you later suspect exposure. Prefer temporary or scoped credentials if supported. - Run the code locally in an isolated environment (container or VM) and review network activity if possible. The code uses official SDKs and accesses Tencent APIs/COS; verify there are no hidden third-party endpoints in the code (search for unexpected domains/IPs). If you want to proceed safely: set the required env vars only in your OS environment (not in chat), audit mps_load_env.py for aggressive file reads, and prefer a least-privilege key for testing. If you need, I can list the exact places the code reads env vars and the lines that encourage asking users for secrets so you can inspect them.
能力标签
cryptocan-make-purchases
能力评估
Purpose & Capability
The code and SKILL.md implement a large, coherent Tencent MPS client (transcode/enhance/AIGC/subtitle/COS ops). Requesting Tencent Cloud credentials and COS configuration is consistent with the stated purpose. However, the registry metadata declares no required environment variables or primary credential even though SKILL.md and many scripts (e.g., mps_load_env.py, mps_aigc_image.py, mps_cos_download.py) require TENCENTCLOUD_SECRET_ID / TENCENTCLOUD_SECRET_KEY and optional COS variables — this mismatch between metadata and actual needs is an inconsistency.
Instruction Scope
SKILL.md and several scripts instruct the agent and user to ensure TENCENTCLOUD_SECRET_ID / SECRET_KEY are set and even include messaging that the AI can 'help you configure them' if the user 'send the variable values directly in the conversation'. Scripts attempt to auto-load credentials from system profile files (e.g., ~/.profile, /etc/environment) via mps_load_env and will prompt about loading them. Encouraging the user to paste cloud credentials into chat and automatic attempts to load system env files broaden the skill's scope into secret collection and system-file access, which is outside a minimal, safe usage pattern.
Install Mechanism
No install spec is provided (instruction-only), and the KD instructs pip installing tencentcloud-sdk-python and cos-python-sdk-v5 if needed. No remote downloads or archive extraction are present in the manifest. This carries normal, moderate developer friction but not the high risks associated with arbitrary URL downloads.
Credentials
The scripts legitimately need Tencent Cloud credentials and (optionally) COS bucket/region values. That is proportionate to the MPS functionality. However: (1) the skill metadata does not declare these required env vars or a primaryEnv, (2) the skill's runtime instructions explicitly instruct the assistant to solicit secret values via conversation and to auto-load system environment files, and (3) scripts accept secrets via CLI flags or try to read system-wide profile files — together these create an elevated risk of secrets being exposed or captured in chat. The number and sensitivity of credentials requested are reasonable for the service but the way the skill directs the agent to obtain them is not properly constrained.
Persistence & Privilege
always is false and the skill does not request persistent platform privileges. The scripts read and write local files (downloads, outputs) and may create directories for downloads, which is expected for a CLI-style toolkit. There is no evidence the skill attempts to modify other skills or global agent settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install tencent-mps-intl
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /tencent-mps-intl 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.1.7
## Changelog for tencent-mps-intl v1.1.7 - Expanded feature mapping and capability listing in the documentation for all supported MPS features. - Clarified command output formats, mandatory cost notices, TaskId reporting, and Markdown link requirements for all media processing operations. - Updated explanations and environment setup guidance for input source handling and COS integration. - Improved async task handling specification: now details manual querying procedures across task types and mandates user confirmation for ambiguous queries. - Clear separation of script responsibility—added a precise user requirement-to-script mapping matrix.
元数据
Slug tencent-mps-intl
版本 1.1.7
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Tencent MPS Intl. 是什么?

Tencent Cloud MPS: [Transcode] transcode/compress/H.264/H.265/AV1/MP4/AVI/MKV/FLV/MOV/bitrate/resolution/fps. [Enhance] quality-enhance/restore/super-res/ant... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 65 次。

如何安装 Tencent MPS Intl.?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install tencent-mps-intl」即可一键安装,无需额外配置。

Tencent MPS Intl. 是免费的吗?

是的,Tencent MPS Intl. 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Tencent MPS Intl. 支持哪些平台?

Tencent MPS Intl. 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Tencent MPS Intl.?

由 tencent-mpaas-skills(@tencent-mpaas-skills)开发并维护,当前版本 v1.1.7。

💬 留言讨论