Aliyun Wan Video

Key things to check before installing or running this skill: - Authentication: The registry declares no required env vars, but the SKILL.md and scripts require DASHSCOPE_API_KEY (or dashscope_api_key in ~/.alibabacloud/credentials). Provide a dedicated, least-privilege API key for testing and do not reuse high-privilege keys. - Path mismatches: The SKILL.md validation command and output paths don't match the included scripts' paths and output directory names. Expect the provided validation step to fail unless you adjust paths. Review and fix paths before relying on automated validation. - .env and credentials loading: The scripts auto-load .env files (from cwd or repo root) and read ~/.alibabacloud/credentials. Audit those files for sensitive values you don't want the skill to pick up and consider running in an isolated environment or container. - Third-party package: The skill uses the 'dashscope' Python package. Inspect that package (and pin a specific version) before pip installing in production. - Test safely: Run the scripts in a disposable virtualenv and verify behavior (where files are written, what requests are made) before integrating into a pipeline. If you want a safer posture, ask the skill author to: (1) declare DASHSCOPE_API_KEY as a required credential in the metadata, (2) fix the validation and output-path inconsistencies, and (3) document exactly which files it reads so you can audit them.