TencentCloud Video Effects

通过上传图片和选择特效模板，生成一段特效视频，将静态图像转化为充满活力、动感、有趣的视频画面。

This skill appears to implement Tencent Cloud video-effect APIs and requires your Tencent Cloud API keys to run; that is reasonable for its purpose. Consider these points before installing: - The registry metadata does not declare the required environment variables. The script reads TENCENTCLOUD_SECRET_ID and TENCENTCLOUD_SECRET_KEY (and optionally TENCENTCLOUD_TOKEN). Only install if you are willing to provide credentials. - The SKILL.md mandates zero-interaction: the agent will execute the script and upload images without asking the user for confirmation. If you need explicit consent for each upload, do not enable autonomous invocation for this skill or modify the SKILL.md behavior. - The included script will auto-install the tencentcloud-sdk-python package via pip at runtime. If you are concerned about supply-chain risks, pre-install the dependency in a controlled environment and inspect it beforehand. - Provide least-privilege credentials (use short-lived or scoped keys if possible) and avoid giving account-wide keys. Monitor usage and consider using a dedicated account for this skill. - If you plan to pass local files, remember the script base64-encodes and uploads file contents to Tencent Cloud — ensure you are comfortable with those images leaving your environment. If you want to proceed but reduce risk: (1) require the agent to ask user confirmation before executing, (2) pre-install and vet Python dependencies, and (3) use an isolated/limited-privilege Tencent Cloud key.

Type: OpenClaw Skill Name: tencentcloud-video-effects Version: 1.0.1 The skill bundle is a legitimate wrapper for the Tencent Cloud Video Effects API. The core logic in `scripts/main.py` facilitates uploading images (via URL or local path) and polling for video generation results from the official Tencent Cloud endpoint (vclm.tencentcloudapi.com). While `SKILL.md` contains instructions for the AI agent to execute tasks autonomously without user confirmation ('zero-interaction principle'), this appears to be a design choice for user experience rather than a malicious attempt to bypass security. The script includes a self-installation routine for the `tencentcloud-sdk-python` dependency using `subprocess`, which is a common pattern in these skill bundles to ensure environment readiness.