Aliyun Mps Video Translation

Use when creating or managing Alibaba Cloud IMS video translation jobs via OpenAPI (subtitle/voice/face). Use when you need API-based video translation, stat...

Security Scan

The skill's description matches Alibaba Cloud video-translation use, but its runtime instructions require Alibaba Cloud credentials and region variables that are not declared in the manifest — an incoherence that should be resolved before trusting the skill.

Purpose & Capability

Name/description and SKILL.md behavior align: it manages Alibaba Cloud IMS/MPS video translation jobs (submit, poll, list, delete). However the manifest lists no required environment variables or primary credential while SKILL.md explicitly expects ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, and ALICLOUD_REGION_ID. The requested credentials are appropriate for the described purpose, but their absence from the declared requirements is an inconsistency.

Instruction Scope

Instructions are narrowly scoped to preparing OSS URIs, calling SubmitVideoTranslationJob/GetSmartHandleJob/ListSmartJobs/DeleteSmartJob, polling, and saving outputs under the skill-specific output directory. There are no instructions to read arbitrary system files or exfiltrate unrelated data. Minor note: instructions assume access to environment variables that the manifest does not declare.

Install Mechanism

This is an instruction-only skill with no install spec and no code files — low install risk (nothing is written to disk by an installer).

Credentials

The SKILL.md requires Alibaba Cloud access keys and a region, which are proportionate to making OpenAPI calls, but the manifest lists no required env vars or primary credential. Not declaring these credentials in the manifest is a red flag (either an omission or misconfiguration) and makes it unclear what secrets the agent will request at runtime.

Persistence & Privilege

always:false and default autonomous invocation settings are used. The skill does not request persistent installation or system-wide config changes. No privilege escalation indicators in the provided files.

What to consider before installing

Do not provide long-lived Alibaba Cloud credentials to this skill until the manifest is corrected. The SKILL.md clearly needs ALICLOUD_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY_SECRET, and ALICLOUD_REGION_ID but the package declares none — ask the publisher to add these to requires.env and to specify the primary credential. If you proceed: (1) use a least-privilege Alibaba account or temporary STS credentials limited to OSS read/write and the specific MPS/IMS API actions (SubmitVideoTranslationJob, GetSmartHandleJob, ListSmartJobs, DeleteSmartJob); (2) restrict the keys to the region(s) you intend to use; (3) run first in a sandbox project and inspect the files saved under output/aliyun-mps-video-translation for sensitive data; (4) prefer short-lived credentials and rotate/revoke them after testing. The present inconsistency makes the package suspicious until clarified.

Category: service

IMS Video Translation (OpenAPI)

Submit video translation jobs via OpenAPI and poll results for subtitle-level, voice-level, and face-level processing.

Prerequisites

• Prepare OSS input/output URIs (recommended to match API region).
• Configure AK: ALICLOUD_ACCESS_KEY_ID / ALICLOUD_ACCESS_KEY_SECRET / ALICLOUD_REGION_ID (ALICLOUD_REGION_ID can be used as the default region; if unset, choose the most reasonable region and ask when unclear).

Workflow

1. Prepare source file and output OSS location.
2. Submit job with SubmitVideoTranslationJob.
3. Poll status and result with GetSmartHandleJob.
4. Use ListSmartJobs / DeleteSmartJob for job management when needed.

Level Selection and Parameters

• Selection rules and fields for subtitle/voice/face levels are in references/fields.md.
• Field examples (Input/Output/EditingConfig) are also in references/fields.md.

Notes

• For second-pass editing, set SupportEditing=true in the first job and reference OriginalJobId later.
• Input and output OSS regions must match the OpenAPI invocation region.
• Use longer polling intervals for large jobs to avoid frequent requests.

Validation

mkdir -p output/aliyun-mps-video-translation
echo "validation_placeholder" > output/aliyun-mps-video-translation/validate.txt

Pass criteria: command exits 0 and output/aliyun-mps-video-translation/validate.txt is generated.

Output And Evidence

• Save artifacts, command outputs, and API response summaries under output/aliyun-mps-video-translation/.
• Include key parameters (region/resource id/time range) in evidence files for reproducibility.

References

• Source list: references/sources.md