vwu.ai TTS Models

调用 vwu.ai 语音合成模型speech-2.8-hd和speech-2.8-turbo，需配置API key并支持OpenAI兼容接口。

Security Scan

The skill mostly does what it says (calls vwu.ai chat endpoint with a user API key), but there are several inconsistencies and minor risks (missing declared env var in registry, undocumented configurable endpoint, reliance on curl/jq, and partial API-key leaking on error) that you should understand before installing.

Purpose & Capability

Skill name/description (vwu.ai TTS models) align with the code and SKILL.md: the script calls vwu.ai chat completions for the two listed models. However, the registry metadata claims no required env vars or primary credential while the SKILL.md and the included script clearly require VWU_API_KEY — this mismatch is inconsistent and should be corrected.

Instruction Scope

SKILL.md instructs setting VWU_API_KEY and calling a CLI, which matches the script, but it omits mention of VWU_BASE_URL (the script allows overriding the endpoint). The script also assumes curl and jq are available (SKILL.md/registry do not declare binaries). The script prints a masked but partially-identifying prefix of the API key on quota errors, which is a small leakage. The SKILL.md example uses a --model flag but the script expects positional args, a usability/instruction mismatch.

Install Mechanism

No install spec (instruction-only with a small shell script). That is low risk because nothing is automatically downloaded or installed by the skill bundle itself.

Credentials

Only VWU_API_KEY is needed for operation, which is proportionate — but the registry metadata does not declare this required credential. Also the script exposes the first 8 characters of the key on certain errors and accepts VWU_BASE_URL (undocumented) which could be pointed at a non-official endpoint if an environment variable is set.

Persistence & Privilege

The skill does not request permanent presence (always:false) and does not modify other skills or system-wide settings.

What to consider before installing

Before installing: (1) confirm the registry metadata is corrected to list VWU_API_KEY as a required credential. (2) Ensure curl and jq are available on the agent runtime or adjust the script; SKILL.md should mention these prerequisites. (3) Be cautious about VWU_BASE_URL — it can redirect requests to any host if you or an attacker sets that env var; don't set it unless you trust the host. (4) Note the script prints the first 8 characters of your API key on quota errors — consider rotating keys if you expose logs to others. (5) The SKILL.md usage example and the script's argument parsing differ; test locally first. If any item is unclear, ask the publisher to clarify or provide a corrected SKILL.md and registry metadata before use.

tts Models for vwu.ai

vwu.ai 平台上的 tts 模型调用技能。

支持的模型

• speech-2.8-hd
• speech-2.8-turbo

共 2 个模型。

配置

使用前需要设置 vwu.ai API key:

export VWU_API_KEY="your-key-here"

获取 key: https://vwu.ai 控制台

使用示例

# 调用模型
vwu-chat --model speech-2.8-hd "你的问题"

API 兼容性

所有模型兼容 OpenAI API 格式，支持标准 chat completions 接口。

额度提示

如果使用时提示"额度不足"或类似错误：

1. 访问 https://vwu.ai
2. 在控制台充值或调整额度
3. 或生成新的 API key

---

由 Claw 自动生成 | 源数据: vwu.ai