What is videohub-queue?

A local API and queue manager for VideoHub's idle-time jobs. An API is a way for programs to request information or actions from another program.

Use it to check health, view or add queue items, remove or clear tasks, and read or change idle-time settings while the VideoHub GUI is running.

It lets a browser extension or other client inspect and change queued work without directly controlling the worker that eventually runs it.

How cacity/VideoHub configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to cacity/VideoHub. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/cacity/VideoHub/main/.agents/skills/videohub-queue/SKILL.md

Clone the repo

git clone --depth 1 https://github.com/cacity/VideoHub

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/cacity/videohub/videohub-queue/github.svg)](https://agentmods.dev/skills/cacity/videohub/videohub-queue)

Your own site

<a href="https://agentmods.dev/skills/cacity/videohub/videohub-queue"><img src="https://agentmods.dev/badge/skills/cacity/videohub/videohub-queue/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/cacity/videohub/videohub-queue"><img src="https://agentmods.dev/badge/skills/cacity/videohub/videohub-queue.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 42 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 495 The whole file, excluding the scripts and references it only reads on demand.

Security scan B 2 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 3 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

high Tool Misuse · line 22
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
high Tool Misuse · line 23
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
medium Data Exfiltration · line 29
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00042	$0.00495
Opus 5.5	$0.00017	$0.00198
Sonnet 5.5	$0.00008	$0.00099
Haiku 4.5	$0.00004	$0.00049

Measured 2mo ago against content hash 56cc7633504a, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

videohub-queue scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Sends data to an external URLmediumData exfiltration

A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.

curl -X POST http://127.0.0.1:8765/api/queue/add -H "Content-Type: application/json" -d '{"platform":"youtube","url":"https://example.com","title":"sample"}'

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

allowed-tools: Bash(curl*)

.agents/skills/videohub-queue/SKILL.md · 50 lines

What it actually says

VideoHub Idle Queue

复用 F:/work/VideoHub/src/api_server.py:19 提供的本地 API。

前置条件

必须先启动 GUI：

python main.py

GUI 启动后会拉起本地 Flask API，默认端口 8765。

可用接口

GET /api/health
GET /api/queue
POST /api/queue/add
DELETE /api/queue/clear
DELETE /api/queue/remove/<task_id>
GET /api/settings
PUT /api/settings

示例

curl http://127.0.0.1:8765/api/health
curl http://127.0.0.1:8765/api/queue
curl -X POST http://127.0.0.1:8765/api/queue/add -H "Content-Type: application/json" -d '{"platform":"youtube","url":"https://example.com","title":"sample"}'
curl -X DELETE http://127.0.0.1:8765/api/queue/remove/0
curl -X DELETE http://127.0.0.1:8765/api/queue/clear

请求要求

新增任务至少包含：

platform
url
title

当前任务默认值

src/api_server.py 会把扩展请求转换成闲时任务，默认生成字幕、嵌入字幕，但 translate_to_chinese 默认为 False。
如果任务参数里没有 target_language，后端 worker 会使用默认 zh-CN。
如需非中文字幕翻译，应在调用链中显式传入 target_language（例如 ja、ko、ru）。

注意

这个 skill 不是独立后端，它依赖正在运行的 GUI 状态。
队列实际执行仍由 main.py 中的 idle queue 定时逻辑负责。

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago First seen · 50 lines · 42 tokens per session scan B 56cc7633504a

Subscribe to this mod's changes

videohub-queue is a skill published in the GitHub repository cacity/VideoHub (183 stars, last pushed 3d ago), licensed MIT. It adds 42 tokens to every session and 495 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it B with 2 findings (sends data to an external url, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Backend and APIs Productivity ai-video coding-agents ffmpeg subtitles video-editing video-production

videohub-queue next to 6 skills from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
videohub-queuecacity/VideoHub	Skill	183	3d ago	MIT	B	42	Claude Code
qiaomu-cutjoeseesun/qiaomu-cut-skill	Skill	378	24d ago	MIT	B	218	Codex
frontend-designOrkas-AI/Orkas-VideoStudio	Skill	344	2d ago	MIT	A	57	Claude Code, Codex
stage-planOrkas-AI/Orkas-VideoStudio	Skill	344	2d ago	MIT	A	0	Claude Code, Codex
gate-controlOrkas-AI/Orkas-VideoStudio	Skill	344	2d ago	MIT	A	81	Claude Code, Codex
stage-editOrkas-AI/Orkas-VideoStudio	Skill	344	2d ago	MIT	A	62	Claude Code, Codex
stage-consistencyOrkas-AI/Orkas-VideoStudio	Skill	344	2d ago	MIT	A	92	Claude Code, Codex

VideoHub: Skill for Claude Code