MiniMax Coding Plan Tool Patched

Use MiniMax Coding Plan API for real-time web search and image understanding (VLM). Based on yorch233/minimax-coding-plan-tool, patched to use api.minimax.io...

Security Scan

The skill's code, instructions, and required credential (MINIMAX_API_KEY) are consistent with its stated purpose (web search and image understanding via the MiniMax Coding Plan API).

Purpose & Capability

Name/description, required binary (node), primary env var (MINIMAX_API_KEY), and the included script all align with performing web search and VLM image understanding against api.minimax.io. The requested credential and host are coherent with the Coding Plan API functionality described.

Instruction Scope

SKILL.md and the CLI script limit actions to calling MiniMax endpoints and (when invoked with a local path) reading a user-specified image file and base64-encoding it. This file read behavior is expected for image analysis but means any local file path you pass will be read and transmitted to the MiniMax API — do not pass sensitive files.

Install Mechanism

There is no install script; this is instruction + a small included Node script. No downloads or archive extraction occur, and the skill relies only on the existing 'node' binary.

Credentials

Only a single API credential (MINIMAX_API_KEY) is required and used as a bearer token for requests to api.minimax.io. No unrelated secrets, extra config paths, or unexpected environment access are requested.

Persistence & Privilege

The skill is not forced-always, does not request persistent system-level configuration, and contains no code that modifies other skills or global agent settings.

Assessment

This skill appears to do what it claims: it runs the included Node script and POSTs queries or image data to api.minimax.io using the MINIMAX_API_KEY you supply. Before installing, ensure: (1) you trust the MiniMax Coding Plan service and its privacy policy because any image file you provide (or URL) will be sent to that API; (2) you only set MINIMAX_API_KEY to a Coding Plan key (sk-cp-*) and do not reuse higher-privilege keys elsewhere; (3) you do not pass paths to sensitive local files — the script will read and base64-encode any local file you give it; and (4) you are comfortable executing third-party JS code with your environment (the included script runs network requests and reads local files). If you want extra assurance, review the included scripts locally or run them in an isolated environment before granting the key to production agents.

MiniMax Coding Plan Tool

Forked from yorch233/minimax-coding-plan-tool
Patch: Changed API host from api.minimax.chat to api.minimax.io to work with sk-cp-* Coding Plan keys.

Uses api.minimax.io with Coding Plan API Key (format: sk-cp-*). No external MCP servers required.

Features

minimax_web_search — Web Search

MINIMAX_API_KEY="sk-cp-xxx" node scripts/minimax_coding_plan_tool.js web_search "query"

minimax_understand_image — Image Understanding

MINIMAX_API_KEY="sk-cp-xxx" node scripts/minimax_coding_plan_tool.js understand_image ./photo.png "Describe this image"

Supports local files (auto base64) and HTTP/HTTPS URLs.

Configuration

openclaw config set skills.entries.minimax-coding-plan-tool.env.MINIMAX_API_KEY "sk-cp-xxx"

Or in openclaw.json:

"skills": {
  "entries": {
    "minimax-coding-plan-tool": {
      "env": { "MINIMAX_API_KEY": "sk-cp-xxx" }
    }
  }
}