SKILLEMALL.ai
GitHub ↗ RU Sign in

BF tencent-vod

腾讯云 VOD（云点播）操作命令生成专用助手。只要用户的请求涉及 VOD 的任何具体操作，必须触发此 Skill，包括但不限于：【上传】本地视频/音频/图片上传、URL拉取上传到VOD、设置过期时间/SessionId去重/存储路径/按应用名上传；【媒体处理】转码/极速高清/截图/雪碧图/视频增强/真人增强/漫剧增强/短剧场景转码/电商场景转码/场景转码/转封装/remux/转为HLS/MP4/GIF/自适应码流/审核/任务流/procedure；【媒体查询】根据FileId查询媒体详情/转码信息/字幕/封面/元数据；【AIGC】文生图/文生视频/图生视频（Kling/Hunyuan/Vidu/GG/GV/Hailuo/MJ/Qwen/SI/OG/Jimeng/Mingmou/OS/Seedance/PixVerse模型）、LLM对话/推理思考/JSON格式响应/视频URL理解/图片URL理解/多模态（GPT/Gemini/流式输出）、场景化AIGC生图/AI换衣/AI扩图/outpainting/商品图/产品展示/产品360度展示/场景化生视频、高级自定义主体/AIGC主体/image_refer/video_refer、文生音效/视频生音效/文生音乐/AI配乐/ASMR模式（Kling/MiniMaxMusic/GL模型）；【AIGC令牌】Token创建/查询/删除/AIGC令牌管理；【AIGC用量】生图/生视频/生文用量统计/Text/Image/Video用量查询；【搜索】名称/语义/知识库搜索/按标签/存储类型/审核结果/过期时间过滤；【知识库】导入知识库/语义搜索；【图片处理】图片超分/降噪/增强/理解；【子应用】子应用查询；【任务查询】查询任务状态/详情。触发关键词：VOD、上传、拉取上传、转码、截图、增强、审核、AIGC、生图、生视频、生音效、生音乐、配乐、LLM、Gemini、GPT、Chat、FileId查询、媒体查询、知识库、自定义主体、任务流、转封装、remux、场景转码、视频增强、换衣、扩图、商品图、产品展示、图片超分、图片降噪、子应用、AIGC Token、AIGC用量、用量统计。不触发：MPS相关操作（画质增强/字幕提取/人声分离/去水印/精彩集锦/媒体质检）、COS直传、直播CSS、一般性咨询。

ClawHub Agent Skills author: tencent-mpaas-skills v1.1.3 MIT-0 42 files body ≈ 5 075 tokens Open the sourceclawhub.ai↗ analyzed 3 d ago

As a process F 31/100 · Will not run — References files that are not bundled: URL, references/*.md

ProcedureAI and agentsMedia and videotype and topics are labelled automatically from the skill text
Runs in: OpenClaw Claude / Claude Code ChatGPT / Codex Gemini CLI Cursor GitHub Copilot / VS Code Qwen Code Kimi Code CLI Z.ai (GLM) DeepSeek (Deep Code) Mistral Vibe LangChain (deepagents) Goose OpenCode
JSON
Technical rating
B
75/100
safety, quality, tests
Safety 60%
92
Quality 40%
50
Run on models
none yet
Process rating
F
31/100
Will not run
References files that are not bundled: URL, references/*.md
Tools and files w 18
0
Result and completion w 14
0
Inputs and preconditions w 11
0
the three weakest of ten parameters · all ten

How to improve

  1. Say in the description WHEN to use the skill ("use when…", example requests): that is the agent's main cue.
  2. The SKILL.md body is over 5,000 tokens: move reference detail into references/ and load it when needed.
  3. The text references files that are not there: add them or drop the references.
For the model run — optional
  • Your own cases (evals/evals.json, 4–6 real requests with expected answers): the full check would then run those instead of a model-drafted suite.
  • A spec.yaml with trigger phrases and assertions — a behaviour contract for CI; `skilltest init` writes a template.

Guard findings · 8

✓ No critical or high findings

Medium and low: 8
  • low Secrets in code secret-high-entropy-token references/vod_create_scene_aigc_video_task.md:306
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    --task-id "2514…123"
    quoted
  • low Secrets in code secret-high-entropy-token references/vod_create_scene_aigc_video_task.md:312
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    --task-id "2514…123" \
    quoted
  • low Secrets in code secret-high-entropy-token references/vod_create_scene_aigc_video_task.md:319
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    --task-id "2514…123" \
    quoted
  • low Secrets in code secret-high-entropy-token references/vod_scene_aigc_image.md:420
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    --task-id "2510…123"
    quoted
  • low Secrets in code secret-high-entropy-token references/vod_scene_aigc_image.md:426
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    --task-id "2510…123" \
    quoted
  • low Secrets in code secret-high-entropy-token references/vod_scene_aigc_image.md:433
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    --task-id "2510…123" \
    quoted
  • low Obfuscation obf-base64-blob scripts/vod_aigc_video.py:633
    Long base64-looking blob (detector / deny-list definition)
    help='多个参考图的 JSON 数组，格式：[{"Type":"Url","Url":"...","Category":"Image","Usage":"Reference","Text":"pic1","ReferenceType":"subject"}]；支持 SDK 全字段：Type/FileId/Url/Base64/Category/Usage/Text/ReferenceType/
    detector
  • low Secrets in code secret-high-entropy-token scripts/vod_scene_aigc_image.py:460
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    python3 vod_scene_aigc_image.py query --task-id "2510…xxx"
    quoted

Files scanned: 42. Evidence is masked. Grey chips explain why severity was lowered.

Against the Agent Skills spec

  • warning description-no-when description does not say WHEN to use the skill (no "use when")
  • warning body-long SKILL.md body ≈ 5075 tokens (recommended < 5000); move details to references/
  • warning missing-ref reference to a missing file: URL
  • warning missing-ref reference to a missing file: references/*.md

Process rating: all ten parameters 31/100

Will not run. References files that are not bundled: URL, references/*.md
  • 0Tools and files. 2 referenced file(s) missing: URL, references/*.md
  • 0Result and completion. Does not say what the result is
  • 0Inputs and preconditions. Does not say what the process needs to start
  • 0Failures and branches. Linear process with no failure handling
  • 0Progress reporting. Says nothing while it works
  • 20When it triggers. No condition that starts the skill
  • 30Running it twice. 13 mutating operations with no state check
  • 70Execution cost. Instruction body is 5075 tokens
  • 100Steps. 42 steps
  • 100Consistency. Name and required fields are in place
  • low The response is described with custom markup (23 tags): a typed call is more reliable

Everything here is measured from the skill text rather than judged by a model, so the numbers are checkable. A parameter weighs more when it is a more common reason for the process to stall.

Quality signals

  • +5Description has no quoted example phrases that should trigger the skill
  • +4Description does not say when NOT to use the skill (false activations)
  • +3Description length 980: 120–800 characters recommended
  • +3Output format is not stated: the model decides each time
  • -249 emoji in the instructions: noise for the model
  • -31 of 20 scripts are never mentioned in SKILL.md
  • +2Single-language instructions
  • +4Structure: 23 headings
  • +3Step-by-step instructions: 42 items
  • +4Has examples (3 code blocks)
  • +4Reference files are cited in the instructions (18 of 18)
  • +1License stated

Quality base 70; lint remarks subtract, signals add up to 100. Result: 50.

External checks

ClawHub: suspicious
The skill is mostly a Tencent VOD automation helper, but it needs Review because it can modify the local Python environment, persist long-lived tokens, store media-related metadata, and send prompts or media URLs to cloud AIGC services with uneven warning.
LLM: suspicious (high) · 9 Aug 2026