{"skill":{"slug":"minimax-video","displayName":"Minimax Video","summary":"Use Zhipu (智谱) web search API for searching the internet. Use when user asks for web search, latest news, or needs current information.","description":"---\nname: minimax-video\ndescription: Use Zhipu (智谱) web search API for searching the internet. Use when user asks for web search, latest news, or needs current information.\nallowed-tools: Bash(curl:*) Bash(jq:*)\nenv:\n  - MINIMAX_API_KEY\n---\n\n# Zhipu Web Search\n\nUse Zhipu's web search API to search the internet.\n\n## ⚠️ Security Requirements\n\n**This skill requires `MINIMAX_API_KEY` environment variable to be set before use.**\n\n### Security Best Practices:\n\n1. **DO NOT store API keys in ~/.bashrc** - keys can be leaked\n2. **DO NOT source shell configuration files** - prevents arbitrary code execution  \n3. **Set environment variable directly** when running the script\n4. **Be aware** API key will be visible in process list (ps aux)\n\n## Setup\n\n```bash\n# Set API key as environment variable\nexport MINIMAX_API_KEY=\"your_api_key\"\n```\n\n**Get your API key from:** https://www.bigmodel.cn/usercenter/proj-mgmt/apikeys\n\n## Usage\n\n### Quick Search\n\n```bash\nexport MINIMAX_API_KEY=\"your_key\"\n\ncurl -s -X POST \"https://open.bigmodel.cn/api/paas/v4/chat/completions\" \\\n  -H \"Authorization: Bearer $MINIMAX_API_KEY\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\n    \"model\": \"glm-4-flash\",\n    \"messages\": [{\"role\": \"user\", \"content\": \"搜索: YOUR_QUERY\"}],\n    \"tools\": [{\"type\": \"web_search\", \"web_search\": {\"search_query\": \"YOUR_QUERY\"}}]\n  }' | jq -r '.choices[0].message.content'\n```\n\n### Using the Script\n\n```bash\nexport MINIMAX_API_KEY=\"your_key\"\n./search.sh \"搜索内容\"\n```\n\n## Security Analysis\n\n### ✅ What's Safe:\n- No sourcing of ~/.bashrc or shell config files\n- Uses jq for JSON escaping (prevents injection)\n- Uses HTTPS with TLS 1.2+\n- API key via environment variable (not hardcoded)\n- Proper error handling - sensitive info not leaked\n- Input validation (query length limit)\n- Generic error messages (no path/file hints)\n\n### ⚠️ Considerations:\n- **Process list visibility**: API key visible in `ps aux`\n  - Use in trusted environments only\n- **Endpoint**: `https://open.bigmodel.cn` (official Zhipu API)\n\n## Safety Features\n\n| Feature | Implementation |\n|---------|----------------|\n| JSON escaping | jq --arg prevents injection |\n| Input validation | Query length ≤500 chars |\n| TLS | Force TLS 1.2+ |\n| Error handling | Generic messages, no leaks |\n| Timeout | 30 second curl timeout |\n\n## When to Use\n\n- User says \"search for\", \"look up\", \"find information about\"\n- User asks \"what's the latest news about\"\n- User needs current information from the web\n\n## API Endpoint\n\n**Official:** `https://open.bigmodel.cn/api/paas/v4/chat/completions`\n","tags":{"latest":"1.0.0"},"stats":{"comments":0,"downloads":386,"installsAllTime":3,"installsCurrent":3,"stars":0,"versions":1},"createdAt":1771694709987,"updatedAt":1779077193924},"latestVersion":{"version":"1.0.0","createdAt":1771694709987,"changelog":"- Initial release of the minimax-video skill.\n- Integrates Zhipu (智谱) web search API to search the internet.\n- Provides secure setup and usage instructions, with emphasis on API key protection.\n- Includes best practices and a clear summary of safety features (input validation, JSON escaping, TLS, generic error handling).\n- Recommends usage for web searches, current information, and news queries.","license":null},"metadata":null,"owner":{"handle":"honestqiao","userId":"s17eq3bskgcnq6br09q9b93bpx885hds","displayName":"HonestQiao","image":"https://avatars.githubusercontent.com/u/696708?v=4"},"moderation":{"isSuspicious":false,"isMalwareBlocked":false,"verdict":"clean","reasonCodes":["review.llm_review"],"summary":"Review: review.llm_review","engineVersion":"v2.4.24","updatedAt":1779947375140}}