← 返回 Skills 市场
329
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install tencentcloud-video-face-fusion
功能描述
通过提取两张人脸核心特征并实现自然融合，支持多种风格适配，提升创意互动性和内容传播力，广泛应用于创意营销、娱乐互动和社交分享场景。
安全使用建议
Before installing or enabling this skill: (1) Recognize it requires Tencent Cloud API keys — do not provide high‑privilege account keys; create and use credentials with minimal scope and set them only when you intend to run the skill. (2) The skill's registry metadata does not declare those env vars — ask the publisher to correct the metadata to make the credential requirement explicit. (3) The scripts auto-install a PyPI package at runtime; run the skill only in an environment you trust (or sandbox) and inspect the code yourself. (4) The SKILL.md forces the agent to run scripts without asking users — if you want manual consent, modify the instructions or avoid enabling autonomous invocation for this skill. (5) If unsure, run the included scripts locally in an isolated VM/container with test keys before granting broader access.
功能分析
Type: OpenClaw Skill
Name: tencentcloud-video-face-fusion
Version: 1.0.1
The skill provides a functional integration with Tencent Cloud's Video Face Fusion API but exhibits several high-risk behaviors. The SKILL.md file contains explicit prompt-injection instructions (the 'Zero Interaction Principle') that direct the AI agent to execute scripts without user confirmation, bypassing a critical safety layer. Furthermore, the Python scripts (main.py, submit_job.py, query_job.py) use subprocess to automatically install dependencies via pip and include logic to read and base64-encode local files based on user-provided paths without sufficient validation, which could be exploited for local file disclosure if the agent is manipulated.
能力评估
Purpose & Capability
The Python scripts implement Tencent Cloud Video Face Fusion and legitimately need Tencent Cloud API credentials and the Tencent SDK; functionally the code aligns with the described purpose. However, the registry metadata lists no required environment variables or primary credential even though SKILL.md and the scripts require TENCENTCLOUD_SECRET_ID and TENCENTCLOUD_SECRET_KEY — this metadata omission is an incoherence that reduces transparency.
Instruction Scope
SKILL.md explicitly instructs an agent to 'must' execute the provided scripts without asking the user (zero‑interaction principle). It also tells the agent to not manually install dependencies because scripts will auto-install. That grants the skill broad runtime autonomy to run code and perform network installs whenever the agent considers the trigger matched, which could lead to surprising execution.
Install Mechanism
There is no formal install spec, but each script will auto-install the tencentcloud-sdk-python package at runtime using subprocess.check_call pip install. Auto-installing a package from PyPI at runtime is expected for this SDK but increases runtime network activity and means code will modify the environment when executed.
Credentials
The scripts require Tencent Cloud credentials via environment variables (TENCENTCLOUD_SECRET_ID, TENCENTCLOUD_SECRET_KEY, optional TENCENTCLOUD_TOKEN), which are proportionate to the API calls. However, the skill registry metadata did not declare these required env vars or a primary credential, which is inconsistent and makes it harder for users to notice the credential requirement before install.
Persistence & Privilege
The skill is not always-enabled and does not request persistent system changes, which is good. But the SKILL.md's enforced zero-interaction execution combined with the platform's normal autonomous invocation behavior increases the blast radius: the agent is instructed to run external scripts and perform network installs without asking the user. This combination (autonomous invocation + explicit 'must execute' policy in SKILL.md) is a risk factor.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install tencentcloud-video-face-fusion - 安装完成后，直接呼叫该 Skill 的名称或使用
/tencentcloud-video-face-fusion触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Initial release of tencentcloud-video-face-fusion.
- Provides video face fusion by merging user face images into template videos with high quality.
- Supports one-stop task (submit + auto poll), job submission only, and job query only modes.
- Includes detailed environment setup and Agent execution instructions for automation.
- Offers example commands and usage for single/multiple face fusion.
- Supports securely using Tencent Cloud API keys through environment variables.
v1.0.0
tencentcloud-video-face-fusion 1.0.0 初始版本上线：
- 提供腾讯云视频人脸融合（换脸）全流程脚本支持，包括一站式生成、任务提交和任务查询。
- 支持多风格、多模板的人脸融合，适用于创意营销、娱乐和社交分享场景。
- 提供详细环境配置和密钥设置指引（支持 Linux/macOS/Windows）。
- 明确 Agent 执行规范及错误处理要求，避免未授权操作和信息生成。
- 附带调用示例与核心依赖说明，便于开发者快速集成与使用。
元数据
常见问题
TencentCloud Video Face Fusion 是什么？
通过提取两张人脸核心特征并实现自然融合，支持多种风格适配，提升创意互动性和内容传播力，广泛应用于创意营销、娱乐互动和社交分享场景。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 329 次。
如何安装 TencentCloud Video Face Fusion？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tencentcloud-video-face-fusion」即可一键安装，无需额外配置。
TencentCloud Video Face Fusion 是免费的吗？
是的，TencentCloud Video Face Fusion 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
TencentCloud Video Face Fusion 支持哪些平台？
TencentCloud Video Face Fusion 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 TencentCloud Video Face Fusion？
由 败毒（@neck-cn）开发并维护，当前版本 v1.0.1。
推荐 Skills