vwu.ai MiniMax Models

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a straightforward vwu.ai MiniMax chat-model wrapper, with the main caveat that it uses a vwu.ai API key and external provider calls that are not reflected in the registry metadata.

This skill looks safe for its stated purpose if you intend to call vwu.ai MiniMax models. Before installing, be aware that it needs a vwu.ai API key, may consume your vwu.ai quota, sends prompts to the configured provider endpoint, and requires local zsh/curl/jq despite those not being declared in the metadata.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI03: Identity and Privilege Abuse

What this means

Using the skill authorizes requests against the user's vwu.ai account and may consume account quota.

Why it was flagged

The helper requires a vwu.ai API key and sends it as a bearer token. This is expected for the stated API integration, but the registry metadata lists no required env vars or primary credential.

Skill content

VWU_API_KEY="${VWU_API_KEY:-}" ... -H "Authorization: Bearer $VWU_API_KEY"

Recommendation

Use a dedicated, revocable API key if possible, avoid sharing command output that may reveal key details, and prefer registry metadata that declares VWU_API_KEY explicitly.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

Prompts, and any sensitive information included in them, may be processed by vwu.ai or by another endpoint if VWU_BASE_URL is set.

Why it was flagged

The script sends the user's prompt content to an external chat-completions provider endpoint. This is central to the skill's purpose, but users should recognize that prompt data leaves the local environment; the endpoint can also be changed via VWU_BASE_URL.

Skill content

curl -s "$VWU_BASE_URL/v1/chat/completions" ... "messages": [{"role": "user", "content": "$PROMPT"}]

Recommendation

Do not include secrets in prompts unless you trust the provider and its data handling; verify VWU_BASE_URL is unset or points to the intended endpoint.

Info

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

The command may fail or behave unexpectedly on systems without those tools installed.

Why it was flagged

The included helper relies on zsh, curl, and jq, but the provided requirements say no binaries are required. This is an under-declared dependency issue, not evidence of hidden or malicious installation behavior.

Skill content

#!/bin/zsh ... response=$(curl -s "$VWU_BASE_URL/v1/chat/completions" ... ) ... jq -r '.choices[0].message.content'

Recommendation

Declare the required local binaries in metadata or document them clearly before users attempt to run the helper.