MiniMax Coding Plan Tool Patched
PassAudited by ClawScan on May 1, 2026.
Overview
The skill matches its stated MiniMax search and image-analysis purpose; it uses a MiniMax API key and can send selected images/prompts to MiniMax, but the artifacts show no hidden, destructive, or unrelated behavior.
This appears reasonable for MiniMax web search and image understanding. Before installing, make sure you trust the publisher enough to use a MiniMax API key, use a dedicated key if possible, and avoid sending sensitive images or prompts unless you are comfortable with MiniMax processing them.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
It is harder to independently verify the origin or maintenance history of the patched skill.
The registry does not identify a source repository for this patched fork. The full script is present and simple, but the skill provenance is less transparent than a linked repository.
Source: unknown; Homepage: https://platform.minimaxi.com
Review the included script and publisher before use, and prefer a verified or official source if provenance is important.
API calls may use the user's MiniMax account quota or billing, and the key should be treated as sensitive.
The script uses the user's MiniMax credential as a bearer token for API calls. This is expected for the advertised provider integration and is not shown being logged or sent to unrelated endpoints.
const API_KEY = process.env.MINIMAX_API_KEY; ... 'Authorization': `Bearer ${API_KEY}`Use a dedicated MiniMax Coding Plan API key, store it only in the intended skill configuration, and rotate it if exposed.
Private details contained in selected images or prompts may be shared with MiniMax for processing.
For local image analysis, the script reads the selected image file, base64-encodes it, and sends it with the prompt to MiniMax's VLM endpoint. This is disclosed and purpose-aligned, but it is still an external data transfer.
const fileContent = fs.readFileSync(filePath); ... return `data:${mimeType};base64,${base64}`; ... makeRequest('/v1/coding_plan/vlm', { prompt: prompt, image_url: processedImageUrl })Only analyze images and prompts you are comfortable sending to MiniMax, and review MiniMax's privacy and retention terms if the content is sensitive.