← 返回 Skills 市场
Tencent VOD
作者
tencent-mpaas-skills
· GitHub ↗
· v1.0.5
· MIT-0
75
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install tencent-vod
功能描述
腾讯云 VOD（云点播）操作命令生成专用助手。只要用户的请求涉及 VOD 的任何具体操作，必须触发此 Skill，包括但不限于：【上传】本地视频/音频/图片上传、URL拉取上传到VOD、设置过期时间/SessionId去重/存储路径/按应用名上传；【媒体处理】转码/极速高清/截图/雪碧图/视频增强/真人增强/漫剧...
安全使用建议
This package implements real Tencent VOD operations and needs your Tencent SecretId/SecretKey and optionally an AIGC token or sub-app id. However: (1) the registry metadata did not declare these required env vars even though SKILL.md and the scripts need them—that's a red flag for transparency; (2) the included vod_load_env.py will scan and load KEY=VALUE lines from several system files (e.g. /etc/profile, ~/.bashrc) if it finds a target variable there, which could import other secrets into the process environment. Before installing or running: - Only use in an isolated environment or container you control. - Prefer to supply least-privilege or temporary Tencent credentials (short-lived keys) rather than full long-lived keys. - Review the code (vod_load_env.py and scripts) yourself or have a trusted admin do so; consider removing or restricting automatic env-file loading. - Verify that you trust the source (owner/publishing metadata unknown here). If you are uncomfortable, do not provide your real SecretId/SecretKey and do not run the env auto-loader.
功能分析
Type: OpenClaw Skill
Name: tencent-vod
Version: 1.0.5
The skill bundle is a comprehensive toolset for interacting with Tencent Cloud VOD services, including media processing, AIGC generation, and metadata management. The Python scripts utilize official Tencent Cloud SDKs and follow standard API patterns for authentication and request handling. While scripts like `vod_load_env.py` and `vod_aigc_token.py` scan and modify local shell configuration files (e.g., `~/.bashrc`, `~/.env`) to manage environment variables, this behavior is consistent with the stated purpose of a credential management utility and lacks evidence of malicious intent or data exfiltration. All network communication is directed to legitimate Tencent Cloud endpoints (e.g., `vod.tencentcloudapi.com`).
能力标签
能力评估
Purpose & Capability
The SKILL.md and the Python scripts clearly require Tencent Cloud credentials (TENCENTCLOUD_SECRET_ID and TENCENTCLOUD_SECRET_KEY) and optional VOD AIGC token/sub-app id, which are appropriate for a VOD helper. However the registry metadata lists no required environment variables or config paths — a direct mismatch. The code base (many scripts) matches the described VOD functionality, so the capability is real, but the skill bundle metadata understates the credentials/config access it needs.
Instruction Scope
Runtime instructions and the included vod_load_env.py direct the agent to scan and load environment variables from system files (/etc/environment, /etc/profile, ~/.bashrc, ~/.profile, ~/.bash_profile, ~/.env). Loading is conditional (file must contain a target key) but when triggered the code loads all KEY=VALUE pairs from that file into the process environment. This goes beyond simply asking for an API key and includes reading user/system config files — a scope expansion that should be explicit in metadata and accepted by the user.
Install Mechanism
There is no external install script or network download; the skill is instruction + bundled Python scripts that rely on the public 'tencentcloud-sdk-python' and 'requests' packages. No URLs, shorteners, or remote code downloads were found in the provided files. Because code files are bundled but no install spec is declared, users or platforms must ensure the Python deps are installed before running scripts.
Credentials
Requesting Tencent Cloud SecretId/SecretKey is proportionate for a VOD integration. But the skill's manifest did not declare these env-vars as required while SKILL.md and the scripts do — an inconsistency. Additionally, vod_load_env.py will load all KEY=VALUE lines from any config file it deems relevant if a target variable is present, potentially pulling unrelated secrets into the process environment. That behaviour increases the risk surface and should be explicitly disclosed.
Persistence & Privilege
The skill does not request 'always: true' and does not modify other skills or system-wide agent configuration. The vod_load_env tool loads variables into the current process only (not persistently writing back), and scripts make API calls via the Tencent Cloud SDK — no evidence of persistent background agents or forced inclusion.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install tencent-vod - 安装完成后，直接呼叫该 Skill 的名称或使用
/tencent-vod触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.5
tencent-vod v1.0.5
- Major update: SKILL.md fully updated with comprehensive usage instructions, script-command mappings, and strict output/parameter rules.
- Now includes detailed triggering scenarios, supported operations, non-triggering exclusions, and explicit billing/timeout reminders.
- All command outputs must now strictly follow the documented parameter case and quoting rules.
- Clarifies environment variable requirements and mandates immediate user notification for missing cloud credential configs.
- Enforces command output as only what’s specified—no explanations, and mandatory Markdown format for all links.
元数据
常见问题
Tencent VOD 是什么？
腾讯云 VOD（云点播）操作命令生成专用助手。只要用户的请求涉及 VOD 的任何具体操作，必须触发此 Skill，包括但不限于：【上传】本地视频/音频/图片上传、URL拉取上传到VOD、设置过期时间/SessionId去重/存储路径/按应用名上传；【媒体处理】转码/极速高清/截图/雪碧图/视频增强/真人增强/漫剧... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 75 次。
如何安装 Tencent VOD？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tencent-vod」即可一键安装，无需额外配置。
Tencent VOD 是免费的吗？
是的，Tencent VOD 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Tencent VOD 支持哪些平台？
Tencent VOD 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Tencent VOD？
由 tencent-mpaas-skills（@tencent-mpaas-skills）开发并维护，当前版本 v1.0.5。
推荐 Skills