Minimax Tts

• Analyzed: May 12, 2026, 4:30 AM
• Findings: 1
• Version: 1.0.0
• Hash: 9bf722307367a9715bd3a41cbd2a6091adf8f1c56618776c7639c9919266145f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill exhibits significant functional misrepresentation and conflicting documentation. The primary `SKILL.md` and `package.json` describe the skill as 'Zhipu Web Search' using `open.bigmodel.cn`, instructing the AI agent to use it for web search. However, the executable script `skill/scripts/search.sh` actually performs 'Minimax Text-to-Speech' by calling `https://api.minimax.chat/v1/t2a_v2`. This discrepancy means the agent will perform TTS when instructed to do a web search, which is a form of functional misdirection. While there's no evidence of direct malicious intent like data exfiltration, the misleading nature and conflicting information across files (including a nested `skill/SKILL.md` that attempts to change the description to 'Zhipu web tts' but still references the Zhipu search API in examples) make the skill highly suspicious due to its potential for unexpected behavior and API usage.