Alibabacloud Video Editor

ReviewAudited by ClawScan on May 10, 2026.

Overview

This appears to be a legitimate Alibaba Cloud video-editing skill, but it needs cloud credentials and may upload/process user media in Alibaba Cloud.

Install only if you are comfortable using Alibaba Cloud for the edit. Configure a dedicated least-privilege RAM identity, verify the OSS bucket and output path, confirm any costs before submitting jobs, and check the missing dependency file before running the setup command.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill can act using the Alibaba Cloud identity available in the environment, credential file, or ECS role.

Why it was flagged

The skill is expected to use Alibaba Cloud account credentials to submit and query editing jobs. This is disclosed and purpose-aligned, but it is still significant account authority.

Skill content
Scripts automatically obtain credentials via the Alibaba Cloud default credential chain, supporting the following methods ... Environment variable credentials ... ~/.alibabacloud/credentials.ini ... ECS RAM Role
Recommendation

Use a dedicated least-privilege RAM user or role, and avoid broad account-wide credentials where possible.

What this means

Granting full ICE or OSS access could allow more cloud actions than this video-editing workflow strictly needs.

Why it was flagged

The documentation mentions broad convenience policies even though it also provides a narrower minimum policy example.

Skill content
AliyunICEFullAccess — Full access permissions for ICE service ... AliyunOSSFullAccess — Full access permissions for OSS service
Recommendation

Prefer the documented minimum permissions and add only the OSS permissions needed for the selected bucket and objects.

What this means

Running the submit command can create cloud jobs, write output media to configured destinations, and potentially incur cloud usage costs.

Why it was flagged

The skill runs a local Python helper to submit Alibaba Cloud media-producing jobs and optionally wait for completion.

Skill content
python scripts/video_editor.py submit --timeline timeline.json --output-config output.json --wait
Recommendation

Confirm the timeline, output bucket/path, region, and expected cloud charges before submitting jobs.

What this means

Selected local videos, images, or audio files may leave the local machine and be stored/processed in cloud services.

Why it was flagged

Local media may be transferred to Alibaba Cloud OSS through another upload skill before editing.

Skill content
If it is a local file, you need to call the oss-upload skill to upload it and obtain the OSS URL
Recommendation

Only upload media you intend to process in Alibaba Cloud, and verify bucket access controls and retention expectations.

What this means

Dependency installation may fail or depend on an unexpected local requirements file if run from the wrong directory.

Why it was flagged

The setup instructions reference a requirements.txt file, but the supplied file manifest does not include one and there is no install spec.

Skill content
pip install -r requirements.txt
Recommendation

Verify the intended Alibaba Cloud SDK dependencies and install them from trusted, pinned package sources.