Minimax Use
v0.1.0MiniMax AI tools for web search, image analysis, LLM chat, and language translation. Use when you need to search the web, analyze images, generate text with...
⭐ 0· 88·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md, references/API.md, assets/models.json, and the Python code all consistently implement web search, image understanding, chat, streaming chat, and translation via a MiniMax HTTP API. The single required environment variable (MINIMAX_API_KEY) and optional MINIMAX_API_HOST are appropriate for an API client. (Minor note: some headers/path naming (e.g. 'anthropic' and 'anthropic-version') suggest the code pattern was adapted from another provider, but this is a code-style artifact, not incoherence.)
Instruction Scope
Runtime instructions and CLI usage match the functions implemented in code. The only file reads the skill performs are explicit (reading a local image file when the user supplies a path) and those contents are intentionally base64-encoded and sent to the configured remote API for image analysis. There are no instructions to scan arbitrary system files, environment variables beyond MINIMAX_API_KEY/MINIMAX_API_HOST, or to exfiltrate unrelated data.
Install Mechanism
No install spec is provided (instruction-only style), and included code is pure Python relying on the requests library. Nothing is downloaded from an untrusted URL and no extract/install steps are present.
Credentials
Only MINIMAX_API_KEY (primary credential) is required, with an optional MINIMAX_API_HOST override. This is proportionate for a remote API client. No unrelated secrets or system config paths are requested.
Persistence & Privilege
The skill is not marked always:true, does not request system-wide configuration changes, and has no elevated persistence. It will only operate when invoked and uses the environment variables the user provides.
Assessment
This skill appears to do what it says: it sends queries, chat messages, and (if you provide a local path) base64-encoded image data to the configured MiniMax API. Before installing: 1) Only provide MINIMAX_API_KEY if you trust the MiniMax provider and the package source; the registry metadata has no homepage, so verify the publisher. 2) Avoid passing sensitive local images or files to the skill (they are uploaded to the remote API). 3) Consider creating an API key with limited scope and rate limits. 4) If you need stronger assurance, inspect the full scripts/__main__.py in your environment and/or run in an isolated environment before granting access to sensitive data or keys.Like a lobster shell, security has layers — review code before you run it.
latestvk97e1wv9e5cv05wf0yka802m31837138
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
OSLinux · macOS · Windows
EnvMINIMAX_API_KEY
Primary envMINIMAX_API_KEY