技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 79 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：a3273283/vwu-sora
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill largely does what it says (wraps vwu.ai's chat API), but the bundle and metadata omit required environment variables and binaries, and the runtime script exposes part of the API key and uses an undocumented base URL — these inconsistencies merit caution.
目的
The skill's stated purpose (call vwu.ai sora-2 via an OpenAI-compatible API) matches the included script. However the registry metadata declared no required environment variables or binaries while the SKILL.md and vwu-chat.sh clearly require VWU_API_KEY (and rely on curl, jq, and zsh). The metadata omission is an incoherence: a caller or platform expecting no credentials or binaries may not surface required inputs or preconditions.
说明范围
SKILL.md instructs setting VWU_API_KEY and calling the provided script; that stays within the stated purpose. However the script accesses an additional environment variable VWU_BASE_URL (defaulting to https://vwu.ai) which is not documented in SKILL.md, and the script prints a masked form of the API key (first 8 chars) to the console on quota errors — this can leak part of the key into logs/terminals. The script otherwise only sends model and …
安装机制
There is no install spec (instruction-only plus a helper script). This is lower risk because nothing is downloaded or executed automatically beyond the included script. Note: the script assumes presence of curl, jq, and a zsh-compatible shell; those binaries are not declared in the metadata.
证书
The runtime requires an API key (VWU_API_KEY) but the skill metadata lists no required env vars or primary credential. The script also uses VWU_BASE_URL (undocumented) which could be set to a non-official host to redirect the key. The script exposes the first 8 characters of VWU_API_KEY in error output, which risks partial credential leakage to logs or shared consoles. These are disproportionate transparency/metadata issues that reduce trust.
持久
No elevated persistence requested: always:false, no system config modifications, and the skill does not modify other skills or request permanent platform presence. Autonomous invocation is allowed (platform default) but not combined with other alarming privileges.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「vwu.ai Sora Models」。简介：Access and use sora-2 model on vwu.ai platform via OpenAI-compatible chat API w…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/a3273283/vwu-sora/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
# sora Models for vwu.ai
vwu.ai 平台上的 sora 模型调用技能。
## 支持的模型
- sora-2
共 1 个模型。
## 配置
使用前需要设置 vwu.ai API key:
```bash
export VWU_API_KEY="your-key-here"
```
获取 key: https://vwu.ai 控制台
## 使用示例
```bash
# 调用模型
vwu-chat --model sora-2 "你的问题"
```
## API 兼容性
所有模型兼容 OpenAI API 格式，支持标准 chat completions 接口。
## 额度提示
如果使用时提示"额度不足"或类似错误：
1. 访问 https://vwu.ai
2. 在控制台充值或调整额度
3. 或生成新的 API key
---
由 Claw 自动生成 | 源数据: vwu.ai