Aliyun Mps Video Translation
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This looks like a straightforward instruction-only Alibaba Cloud video-translation helper, but it will use Alibaba Cloud access keys and can create or delete cloud jobs.
Before installing, make sure you are comfortable letting the agent use Alibaba Cloud credentials for IMS/MPS video translation. Use a limited access key, verify OSS input/output locations and regions, and explicitly approve any job deletion or expensive processing job.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If broad Alibaba Cloud keys are used, the agent may be able to act on more cloud resources than just the intended video translation jobs.
The skill needs Alibaba Cloud account credentials to call the provider API. This is expected for the stated integration, but users should recognize that the skill operates with whatever permissions those keys grant.
Configure AK: `ALICLOUD_ACCESS_KEY_ID` / `ALICLOUD_ACCESS_KEY_SECRET` / `ALICLOUD_REGION_ID`
Use a least-privilege Alibaba Cloud access key scoped to the needed IMS/MPS, OSS, and job-management permissions, and avoid pasting secrets into chat.
The agent could create billable processing jobs or delete existing job records if directed or if the task is ambiguous.
The documented workflow includes cloud API operations that can create and delete translation jobs. This matches the skill purpose, but these actions can affect cloud resources and possibly costs.
2) Submit job with `SubmitVideoTranslationJob`. 3) Poll status and result with `GetSmartHandleJob`. 4) Use `ListSmartJobs` / `DeleteSmartJob` for job management when needed.
Review job parameters, OSS input/output paths, region, and any deletion request before allowing the agent to submit or delete jobs.