MiniMax Image Generation
v1.1.1MiniMax文生图(T2I)和图生图(I2I)工具 / MiniMax image generation tool supporting T2I and I2I. Generate 1-9 images per request with customizable aspect ratios.
⭐ 0· 319·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's stated purpose (T2I and I2I image generation) matches the included code and SKILL.md: it calls https://api.minimaxi.com, requires a MINIMAX_API_KEY, uploads reference images for I2I, downloads results, and supports the listed models/parameters. Note: the top-level registry summary in the prompt declared 'Required env vars: none' and 'Primary credential: none', but the bundled SKILL.md and _meta.json clearly require MINIMAX_API_KEY. This metadata inconsistency should be corrected but does not indicate malicious intent.
Instruction Scope
Instructions and the script stay within the expected scope: they build a JSON payload, POST to the MiniMax API, download returned image URLs, save files to the workspace, and append an entry to a local log. The SKILL.md explicitly warns that reference images are uploaded to the API and that the local log contains truncated prompts—these behaviors are visible in the code and documented. There are no instructions to read unrelated system files or exfiltrate data to unexpected endpoints.
Install Mechanism
There is no install spec; this is an instruction-only skill with a bundled Python script. No external installers or downloads are performed by the skill itself during install; the script uses only Python stdlib (urllib, json, os). No high-risk remote install URLs or archive extraction are present.
Credentials
The only sensitive runtime dependency is MINIMAX_API_KEY (declared in SKILL.md and _meta.json). That is proportionate for a third‑party image-generation API client. Reminder: the top-level registry metadata in the provided summary incorrectly listed no required env vars—this mismatch should be resolved. The script does not request unrelated credentials.
Persistence & Privilege
The skill does not request elevated platform privileges and always:false. It writes generated images and a local markdown log to /home/ubuntu/.openclaw/workspace/ by default; this is expected but constitutes persistence of prompts and paths in the workspace. If that workspace is synced or shared, usage history and truncated prompts may be exposed. The autonomous invocation default (disable-model-invocation=false) is normal and not by itself a concern.
Assessment
This skill is coherent for calling the MiniMax image API, but check these things before installing:
- Set and protect MINIMAX_API_KEY (the skill requires it; rotate and scope the key if possible). Note the registry summary you saw incorrectly omitted this requirement—trust the SKILL.md/_meta.json.
- Avoid using sensitive/private photos for Image-to-Image: reference images are uploaded to api.minimaxi.com as part of I2I requests.
- Be aware the script auto-downloads images and appends a usage entry (timestamp, truncated prompt, count, aspect ratio, local paths) to /home/ubuntu/.openclaw/workspace/minimax-image-generation-log.md. If your workspace is synced (e.g., to GitHub) or shared, these logs and saved images may be exposed—change --output or the LOG_FILE path or disable logging if needed.
- If you need stronger isolation, run the skill in an environment where the workspace is not synced and network egress is restricted to the expected domain (api.minimaxi.com).
- If you want to remove persistent traces, edit scripts/image_gen.py to disable the logging function or change the output paths.
If you want additional assurance, review and test the bundled scripts in a sandboxed environment and confirm network requests go only to api.minimaxi.com and image URLs returned by that API.Like a lobster shell, security has layers — review code before you run it.
i2ivk97d913c0dajnkbndkk86frn2n83edaqimage-generationvk97d913c0dajnkbndkk86frn2n83edaqlatestvk97d913c0dajnkbndkk86frn2n83edaqminimaxvk97d913c0dajnkbndkk86frn2n83edaqt2ivk97d913c0dajnkbndkk86frn2n83edaq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.