Borrowing it
Nothing to install: this file belongs to Aviator-Coding/home-ops. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Aviator-Coding/home-ops/main/.claude/skills/tdarr-transcoding/SKILL.mdgit clone --depth 1 https://github.com/Aviator-Coding/home-opsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/aviator-coding/home-ops/tdarr-transcoding)<a href="https://agentmods.dev/skills/aviator-coding/home-ops/tdarr-transcoding"><img src="https://agentmods.dev/badge/skills/aviator-coding/home-ops/tdarr-transcoding.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00063 | $0.01200 |
| Opus 5 | $0.00032 | $0.00600 |
| Sonnet 5 | $0.00013 | $0.00240 |
| Haiku 4.5 | $0.00006 | $0.00120 |
Grade A, and why
tdarr-transcoding scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 18 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Tdarr libraries, flows and flow nodes
Relocated verbatim from AGENTS.md on 2026-09-01 so it loads only when this subsystem is in play.
The text below is unchanged; only line breaks were inserted. AGENTS.md keeps a one-sentence pointer.
Add new findings here or to the owning document, not back into AGENTS.md - see its
"Maintaining this file" section for the rule.
-
Tdarr's
librariesToNotProcessis a Tdarr Pro feature and is a silent no-op on this unlicensed install - never use it as a scope boundary. It is stored inNodeJSONDB, rendered in the UI and returned byGET /api/v2/get-nodes, so it looks live;talos-3carried it for Series and still transcoded a TV-Shows file on 2026-08-31. Both queue readers gate it onauth(getQueuedFiles.js:if (auth && librariesToNotProcess.length > 0);getStagedFiles.js: the same conjunction), andauthisauthStatus(false)fromTdarr_Server/srcug/server/auth.js, which is a licence check that POSTstdarrKeyto tdarr.io - not a login.tdarrKeyis empty here andPOST /api/v2/auth-status {"data":{"saU":false}}returnsfalse, which is the exact call the dispatcher makes. This also refutes any "the server pushes work past a node-side accept filter" theory:get-new-taskis a node poll (theServer relay sending job to Node relay: <node>line is the reply), and there is no node-side accept filter at all. What does hold, with noauthcheck anywhere inqb/qbUtils.js+plugins/queueQueryFuncs.js, is the library-level toggles -processLibrary,processTranscodes,processHealthChecksand the per-hourschedule- which build thedb NOT IN (...)clause fortable1. Series is scoped out withprocessTranscodes: false(2026-08-31), which leaves health checks and scanning on. Proof method, and why the same file is simultaneously accepted bytable4and refused bytable1:docs/tdarr-errored-remuxes.md§1. -
A Tdarr flow's
customFunctionnode readsargs.inputs.code; a node whoseinputsDBkey isfunctionsilently runs Tdarr's default stub, which returnsoutputNumber: 1unconditionally.lib.loadDefaultValuesfills the missingcodewith the built-in example, so the node is green, the job report even prints your real source (under"function", next to the stub under"code"), and nothing anywhere reports an error. All five customFunction nodes inmovies_av1_nvenc_v1were in this state - including the three guards that were supposed to reject a bad encode beforeReplace Original File- so every transcode replaced its source with zero verification, across all 6514 job reports. Confirm execution behaviourally, never by reading the flow: grep a job report for a string only your code can emit (Size check: <digit>), or check that a node returned an output number the stub cannot produce. Fixed by rekeying tocode; mechanism, evidence and the still-opene_dv_bypass/br_*_bypassedges that make the DV and bitrate checks inert:docs/tdarr-errored-remuxes.md§2 and §3.6. Reviewable node sources and a read-only unit harness that runs them against the parked masters' real ffProbeData are indocs/tdarr/flow-nodes/. -
Never enable
forceConformon Tdarr'sSet Containernode - it deletes streams rather than converting them.ffmpegCommandSetContainer/1.0.0/index.jssetsstream.removed = trueformov_text/eia_608/timed_id3/datawhen targeting mkv, which on the parked 4K masters is 1-46 subtitle tracks destroyed per file in an irreversible in-place rewrite, with no guard in the flow noticing. The supported path is to convert: acustomFunctionbetweenSet ContainerandSet Video Encoderthat pushes['-c:{outputIndex}', 'srt']onto eachmov_textstream'soutputArgs, and marksremovedonly fordata/bin_dataand zero-dimensionmjpegcover art (the separate cause of Amelie'sdimensions not set). Encoder-specific output arguments have the same shape of trap:-preset medium/-global_quality/-look_aheadareav1_qsv-only and madelibsvtav1fail at init on 88/88 CPU jobs, socargs*now reads back the chosen encoder from the video stream'soutputArgsand branches. Both proven live:docs/tdarr-errored-remuxes.md§3.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 18 lines · 63 tokens per session scan A 39485cf7dd0e
tdarr-transcoding is a skill published in the GitHub repository Aviator-Coding/home-ops (2 stars, last pushed today), licensed MIT. It adds 63 tokens to every session and 1,200 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other skills, from other repositories
webgl-holographic-foil
A self-contained WebGL2 hero: thin-film interference over a crushed-foil surface whose palette shifts with the viewing angle; move the cursor to tilt the film.
general-video
Author or edit a custom HyperFrames composition when no specialized workflow fits, or when BRIEF.md sets flow: companion. Use for longer or multi-scene pieces, brand and sizzle reels, montages, static loops, static title cards, footage remixes, and freeform builds. Use motion-graphics instead for a short unnarrated…
html-ppt-hermes-cyber-terminal
OpenDesign + BYOK: choosing and wiring your own model, hands-on — cost, quality, and the routing decision. Built as a decision-grade AI literacy deck for engineers, IT, applied-AI teams.
html-ppt-taste-brutalist
16:9 HTML deck in tactical-telemetry / CRT-terminal taste. Deactivated-CRT charcoal slides, white-phosphor monospace, hazard-red accent, scanline overlay, ASCII syntax, density over decoration. Distilled from Leonxlnx/taste-skill brutalist-skill (Tactical Telemetry mode).
diagnostic-stem-delivery
Audio production with diagnostic analysis, timecode parsing from documents, and verified export workflow.
chengfeng-check-updates
An environment manager for a video-editing system. It checks whether its skills and runtime—the software needed to run them—are installed and compatible.