Security audit
OpenClaw MiniMax Media
Security checks across malware telemetry and agentic risk
Overview
This is a straightforward setup guide for a MiniMax OpenClaw media plugin, with the main risks being trust in the third-party plugin package and handling the MiniMax API key safely.
Install this only if you intend to use the MiniMax media plugin. Prefer the pinned install command, review the npm/GitHub package before granting it a real API key, use a dedicated or limited MiniMax key where possible, and avoid sending sensitive prompts or media unless you are comfortable with MiniMax processing them.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.