← Back to Skills Marketplace
267
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install vwu-minimax
Description
Call minimax models MiniMax-Hailuo series on vwu.ai with OpenAI-compatible chat completions using your configured API key.
Usage Guidance
This skill generally does what it claims (wraps vwu.ai chat completions), but there are some issues to consider before installing: 1) The registry metadata omits the required VWU_API_KEY and doesn't list required CLI tools (zsh, curl, jq, grep, sed). Expect to set VWU_API_KEY in your environment and ensure the tools are installed. 2) The script prints the first 8 characters of your API key on API errors — avoid using a sensitive/reused key or ensure logs are not exposed; ask the author to remove that behavior. 3) Confirm you trust vwu.ai and the skill source (there is no homepage/source link). If you need stronger assurance, request the publisher add explicit required-env and required-binaries metadata, remove the API-key echo, and publish a trustworthy source/homepage before use.
Capability Analysis
Type: OpenClaw Skill
Name: vwu-minimax
Version: 1.0.0
The skill bundle provides a shell script wrapper for the vwu.ai API. The file `vwu-chat.sh` contains a vulnerability where user-provided variables ($MODEL and $PROMPT) are directly injected into a JSON string for a `curl` command without proper escaping or sanitization. This allows for potential JSON injection, which, per the analysis guidelines, is classified as suspicious due to the lack of input sanitization.
Capability Assessment
Purpose & Capability
The skill's name, SKILL.md, models.txt, and vwu-chat.sh all align: they call vwu.ai's OpenAI-compatible chat completions for MiniMax models. However the registry metadata lists no required env vars or primary credential even though both the README and the script require VWU_API_KEY (and optionally VWU_BASE_URL). This metadata omission is an inconsistency that should be corrected.
Instruction Scope
SKILL.md instructs only to set VWU_API_KEY and how to call vwu-chat; the included vwu-chat.sh uses only VWU_API_KEY and an optional VWU_BASE_URL and calls the vwu.ai /v1/chat/completions endpoint. It does not read unrelated system paths. Concern: on API error the script prints a partially redacted API key (${VWU_API_KEY:0:8}***), which leaks the first 8 characters of the key to console logs/errors — unnecessary and increases risk if logs are collected.
Install Mechanism
There is no install spec (instruction-only), which is low risk. However the provided script assumes certain CLI tools are available (zsh shebang, curl, jq, grep, sed). The registry metadata lists no required binaries; that mismatch could cause runtime failures and should be declared.
Credentials
Requesting an API key for vwu.ai is proportional and expected. But the skill metadata does not declare VWU_API_KEY as required/primary credential, creating an unclear trust surface. Additionally, the script's partial-key echo on error leaks a secret fragment to stdout/stderr — not justified by the task.
Persistence & Privilege
The skill does not request persistent presence, does not set always:true, and does not modify other skill/system configs. It runs a simple CLI wrapper and exits; no privilege escalation or persistent agents are present.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install vwu-minimax - After installation, invoke the skill by name or use
/vwu-minimax - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release - Complete vwu.ai model collection
Metadata
Frequently Asked Questions
What is vwu.ai MiniMax Models?
Call minimax models MiniMax-Hailuo series on vwu.ai with OpenAI-compatible chat completions using your configured API key. It is an AI Agent Skill for Claude Code / OpenClaw, with 267 downloads so far.
How do I install vwu.ai MiniMax Models?
Run "/install vwu-minimax" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is vwu.ai MiniMax Models free?
Yes, vwu.ai MiniMax Models is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does vwu.ai MiniMax Models support?
vwu.ai MiniMax Models is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created vwu.ai MiniMax Models?
It is built and maintained by a3273283 (@a3273283); the current version is v1.0.0.
More Skills