ClawHub

Minimax Usage

v0.1.2

Check MiniMax coding plan usage/credits remaining. Requires MINIMAX_API_KEY environment variable.

⭐ 0· 611·0 current·0 all-time
byKevin Haney@khaney64
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (check remaining MiniMax coding-plan credits) match required artifacts: MINIMAX_API_KEY, curl, jq, and a single script that queries minimax.io. Requested binaries and env var are proportional to the stated purpose.
ℹ
Instruction Scope
SKILL.md only instructs running the included script and optionally piping output to a webhook. The script only reads MINIMAX_API_KEY and talks to https://www.minimax.io; it does not read other files or environment variables. Note: the README encourages piping output to an external Discord webhook — users should ensure any webhook endpoint is trusted because alerts will be transmitted there.
✓
Install Mechanism
No install spec (instruction-only plus an included shell script). Nothing is downloaded or extracted at install time, so there is no additional install risk.
✓
Credentials
Only MINIMAX_API_KEY is required. There are no unrelated secret env vars or config paths requested. The single credential is appropriate for querying the MiniMax API.
✓
Persistence & Privilege
always is false and the skill does not request elevated or persistent system-wide privileges. It does not modify other skills or agent-wide configuration.
Assessment
This skill appears to do exactly what it claims: call MiniMax's remains endpoint and format a Discord-style alert. Before installing, confirm that minimax.io is the expected service and that you trust the owner (source/homepage is unknown). Protect the MINIMAX_API_KEY: store it in a secure secret store rather than exposing it directly in cron environment lines or logs. If you plan to pipe alerts to a webhook (Discord or other), ensure the webhook endpoint is trusted because alerts will contain usage information. If you need higher assurance, review the included script (scripts/minimax-usage.sh) yourself — it is short and readable — and rotate the API key if you later remove the skill or suspect leakage.

Like a lobster shell, security has layers — review code before you run it.

latestvk976fpwra65t6r890dht8nf9wn83cqpb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

💳 Clawdis
Binscurl, jq
EnvMINIMAX_API_KEY

Comments