MiniMax CLI Web Search

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may execute the local mcporter search command when using this skill.

Why it was flagged

The skill invokes a local CLI wrapper and an MCP tool using the user-provided search query. This is central to the stated web-search purpose and arguments are quoted, but users should understand that the agent can run this local command.

Skill content
timeout "$TIMEOUT_SECONDS" mcporter call minimax.web_search query="$QUERY_EFF"
Recommendation

Install and configure mcporter only from a trusted source, and use the skill for intended web-search tasks.

What this means

Searches may use your configured MiniMax account or API quota.

Why it was flagged

The skill depends on a MiniMax API key through the local MCP configuration. This is expected for the service integration, and the artifacts instruct not to print key values.

Skill content
Ensure MiniMax API key is configured for the minimax MCP server.
Recommendation

Use a dedicated or least-privileged API key where possible, and do not paste secrets into search queries.

What this means

Users may need to manually verify the local tooling and configuration before the skill works.

Why it was flagged

The registry metadata does not declare provenance, required binaries, or credential expectations even though the skill documentation and script rely on local mcporter/MiniMax configuration. This is an under-declaration note, not evidence of malicious behavior.

Skill content
Source: unknown; Homepage: none; Required binaries (all must exist): none; Env var declarations: none; Primary credential: none
Recommendation

Confirm the mcporter installation and MiniMax MCP configuration are trusted and working before enabling the skill.

What this means

Anything included in a search query may be transmitted to the configured MiniMax MCP/web-search service.

Why it was flagged

The skill sends search queries through a configured MCP service. This is disclosed and purpose-aligned, but queries may leave the local environment via that provider.

Skill content
Use this skill to run web search through MiniMax MCP from CLI, then return clean, source-first results.
Recommendation

Avoid including private, confidential, or credential-like data in search queries unless you intend to share it with the configured provider.