Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

MiniMax Lyrics Generation

v1.0.0

Generate structured song lyrics in various styles and themes using the MiniMax lyrics_generation API for full song creation or editing.

0· 101·1 current·1 all-time
byxRay@raydoomed

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for raydoomed/minimax-lyrics.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "MiniMax Lyrics Generation" (raydoomed/minimax-lyrics) from ClawHub.
Skill page: https://clawhub.ai/raydoomed/minimax-lyrics
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install minimax-lyrics

ClawHub CLI

Package manager switcher

npx clawhub@latest install minimax-lyrics
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
Functionality matches the name/description: the Python script posts prompts to a MiniMax lyrics_generation endpoint and returns structured lyrics. No unrelated binaries or services are requested. However, the skill's metadata declares no required credentials or config paths while both SKILL.md and the script require a local config file containing an API key — this metadata omission is inconsistent.
!
Instruction Scope
SKILL.md instructs the user to create ~/.openclaw/workspace/skills/minimax-lyrics/lyrics_config.json containing an api_key; the included script reads exactly that path. The instructions cause user-provided prompts/lyrics and the API key to be transmitted to https://api.minimaxi.com. The skill does not request or read other system files, but it does not warn users about sensitive data being sent nor about securing the plaintext API key file.
Install Mechanism
No install spec is provided and the skill is instruction-only with a small helper script; nothing is downloaded or extracted. This is the lowest-risk install mechanism.
!
Credentials
The registry metadata lists no required environment variables or config paths, yet the runtime requires a credentials file (lyrics_config.json) containing an API key. The API key is stored/loaded in plaintext from the user's home path, and there is no guidance about file permissions or key scope. The missing declaration of this credential in the metadata is a proportionality/information gap.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and does not demand persistent elevated privileges. It runs on demand and performs a single network call.
What to consider before installing
This skill appears to do what it claims (call a lyrics-generation API) but there are a few things to consider before installing: - Metadata mismatch: the registry declares no credentials or config paths, but the SKILL.md and script require a local file (~/.openclaw/workspace/skills/minimax-lyrics/lyrics_config.json) containing your MiniMax API key. Ask the author to declare this in the registry (requires.env or required config path). - Data exposure: prompts, existing lyrics, and your API key will be sent to https://api.minimaxi.com. Only proceed if you trust that domain and the skill author. There is no homepage or source provenance provided — that increases risk. - Credential handling: the API key is stored in plaintext in a file under your home directory. If you use this, restrict file permissions (chmod 600) and consider using a secret manager or environment variable instead. Verify the API key scope and rotate it if you stop using the skill. - Privacy: avoid sending sensitive or private content (passwords, PII) as prompts; the external service will receive whatever you send. If you need higher assurance, request the author's source/homepage, ask them to update the registry metadata to declare the required config path/credential, and verify the API domain and its privacy/security practices before using the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk9793e0sdgrp5169wktgpwnvhd84nk1n
101downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

MiniMax Lyrics Generation

Generate structured song lyrics using MiniMax lyrics_generation API.

Setup

Create ~/.openclaw/workspace/skills/minimax-lyrics/lyrics_config.json:

{
  "api_key": "YOUR_MINIMAX_API_KEY"
}

Quick Use

python3 ~/.openclaw/workspace/skills/minimax-lyrics/scripts/generate_lyrics.py \
  --prompt "轻柔抒情流行,温柔女声,慢节奏,深情浪漫" \
  --title "夏日海风"

API Parameters

参数说明
modewrite_full_song(写完整歌曲)或 edit(编辑/续写)
prompt歌曲主题、风格描述(0-2000字符)
title歌曲标题(传入后输出保持该标题)
lyrics现有歌词(仅 edit 模式)

Output

Returns:

  • song_title: 生成的歌名
  • style_tags: 风格标签(如 Mandopop, Summer Vibe
  • lyrics: 带结构标签的完整歌词,支持14种标签:[Intro] [Verse] [Pre-Chorus] [Chorus] [Hook] [Drop] [Bridge] [Solo] [Build-up] [Instrumental] [Breakdown] [Break] [Interlude] [Outro]

歌词可直接传给 minimax-feishu-music skill 生成歌曲。

Example Output

song_title: 夏日海风的约定
style_tags: Mandopop, Summer Vibe, Romance, Lighthearted, Beach Pop
lyrics: |
  [Intro]
  (Ooh-ooh-ooh)
  (Yeah)
  阳光洒满了海面

  [Verse 1]
  海风轻轻吹拂你发梢
  Smiling face, like a summer dream
  浪花拍打着脚边
  Leaving footprints, you and me

  [Pre-Chorus]
  你说这感觉多么奇妙
  (So wonderful)
  想要永远停留在这一秒

  [Chorus]
  Oh, 夏日的海边,我们的约定
  阳光下,你的身影,如此动听

  [Hook]
  永远在一起

  [Bridge]
  时间慢慢走,我们一起老

  [Solo]
  器乐演奏段落

  [Interlude]
  (Ooh-ooh)

  [Break]
  突然安静

  [Outro]
  (Ooh-ooh-ooh)

Notes

  • write_full_song 模式:根据 prompt 自动生成完整歌词结构
  • edit 模式:续写或修改已有歌词
  • 生成后展示给用户看,用户确认后再生成歌曲

Comments

Loading comments...