by 安全扫描
OpenClaw
可疑
medium confidenceThe skill mostly looks like a small helper that builds a QVQ request payload, but there are inconsistencies (validation path mismatch and no auth/usage instructions despite claiming to integrate with Alibaba Cloud) that warrant caution before installing.
评估建议
This package is a small request-generator for Alibaba Cloud QVQ but has a few problems you should resolve before installing: (1) fix the validation mismatch (SKILL.md expects a different validate.txt path than the command produces); (2) be aware the script only writes a JSON with a placeholder image and does not call Alibaba Cloud nor request credentials — if you intend to actually call Model Studio you'll need to add explicit, secure instructions for providing Alibaba Cloud credentials and conf...详细分析 ▾
⚠ 用途与能力
The description claims this is for Alibaba Cloud Model Studio QVQ visual reasoning, but the package only contains a tiny request-builder script and no code or instructions to call Alibaba Cloud APIs or to provide credentials. That mismatch (claimed provider integration vs. only local payload generation) is unexplained.
⚠ 指令范围
SKILL.md's runtime instructions are limited to compiling and running the prepare_qvq_request.py script (which only writes a JSON with a placeholder image). However the validation section has an inconsistent pass criterion: the validation command writes output/aliyun-qvq/validate.txt but the Pass criteria references output/alicloud-ai-multimodal-qwen-vqv/validate.txt (a different path). This is an incoherent test step and should be fixed.
✓ 安装机制
There is no install spec and only a small Python script is included. Nothing is downloaded or written to disk beyond running the provided script, which reduces install risk.
⚠ 凭证需求
The skill advertises Alibaba Cloud QVQ usage but declares no required environment variables or credentials. Real calls to Alibaba Cloud would require authentication and network access; the absence of guidance about credentials or where/when requests are sent is a gap and could lead to confusion or insecure ad-hoc handling later.
✓ 持久化与权限
The skill does not request persistent/always-on presence and does not modify agent/system configs. Defaults (autonomous invocation allowed) are unchanged and acceptable for this helper skill.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/1
Initial release introducing Alibaba Cloud Model Studio QVQ model skill for advanced visual reasoning tasks. - Supports step-by-step image reasoning, chart analysis, and visually grounded problem solving. - Compatible with `qvq-plus` and `qvq-max` model names. - Includes validation and usage instructions for integration. - Recommended for tasks requiring strong visual reasoning over standard image understanding.
● 无害
安装命令 点击复制
官方npx clawhub@latest install aliyun-qvq
镜像加速npx clawhub@latest install aliyun-qvq --registry https://cn.clawhub-mirror.com
技能文档
Category: provider
# Model Studio QVQ Visual Reasoning
Validation
mkdir -p output/aliyun-qvq
python -m py_compile skills/ai/multimodal/aliyun-qvq/scripts/prepare_qvq_request.py && echo "py_compile_ok" > output/aliyun-qvq/validate.txt
Pass criteria: command exits 0 and output/alicloud-ai-multimodal-qwen-vqv/validate.txt is generated.
Critical model names
Use one of these exact model strings:
qvq-plusqvq-max
Typical use
- Mathematical reasoning from screenshots
- Diagram and chart reasoning
- Visually grounded multi-step problem solving
Quick start
python skills/ai/multimodal/aliyun-qvq/scripts/prepare_qvq_request.py \
--output output/aliyun-qvq/request.json
Notes
- Use
skills/ai/multimodal/aliyun-qwen-vl/for standard image understanding. - Use QVQ when the task explicitly needs stronger reasoning over visual evidence.
References
references/sources.md
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制