by 安全扫描
OpenClaw
可疑
high confidenceThe skill appears to do what it claims (call vwu.ai Gemini models), but its metadata and instructions are internally inconsistent: it requires an API key and common CLI tools that are not declared, and the shipped script prints part of the API key on error — these mismatches warrant caution before installing.
评估建议
This skill legitimately calls vwu.ai and needs your vwu.ai API key, but the package metadata fails to declare that requirement and doesn't list runtime tools the script uses (curl, jq, zsh). Before installing: 1) Confirm you trust vwu.ai and are comfortable sending prompts to that external service; 2) Do not install unless you can supply a dedicated API key (and avoid reusing high-privilege keys); 3) Be aware the included script prints the first 8 characters of your API key in quota error messag...详细分析 ▾
ℹ 用途与能力
The skill's stated purpose (call vwu.ai Gemini models) matches the included script and SKILL.md. However, the registry metadata lists no required environment variables or binaries while the SKILL.md and script clearly require VWU_API_KEY and use CLI tools (curl, jq, zsh). This is an incoherence between claimed requirements and actual needs.
ℹ 指令范围
SKILL.md and vwu-chat.sh keep to the stated purpose: they instruct how to set VWU_API_KEY and call vwu.ai's /v1/chat/completions. The script only sends the provided prompt to VWU_BASE_URL and returns the model response. A minor issue: on quota errors the script echoes the first 8 characters of the API key (partial exposure) and it references VWU_BASE_URL (overrideable) which is not declared in metadata.
ℹ 安装机制
There is no install spec (instruction-only), which is low-risk. The package does include a shell script file that will be present when the skill is installed; the script itself uses network I/O. No downloads from arbitrary URLs are present. Still, required runtime binaries (curl, jq, zsh/sh) are not declared by the registry metadata.
⚠ 凭证需求
The skill requires an API key (VWU_API_KEY) to operate, but the registry metadata does not declare this or mark any primary credential. The script also accepts VWU_BASE_URL as an env override. The missing declaration of VWU_API_KEY and of required CLI tools is a proportionality/visibility problem: the agent/user should be explicitly asked for that credential before installing or enabling the skill.
✓ 持久化与权限
The skill is not marked always:true and has no special persistence or system-wide config changes. It does perform network calls to vwu.ai when invoked (expected for its purpose). Autonomous invocation is enabled by default (disable-model-invocation: false) but that is the platform default and not itself flagged here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/16
初始发布 - vwu.ai gemini 模型集合，包含所有可用模型
● 可疑
安装命令
点击复制官方npx clawhub@latest install vwu-gemini
镜像加速npx clawhub@latest install vwu-gemini --registry https://cn.longxiaskill.com