Minimax Music Gyh

MiniMax 音乐生成模型，支持 Music-2.5/Music-2 等模型，根据文本描述生成音乐。使用 MINIMAX_API_KEY 环境变量。

Security Scan

The skill's code matches its stated purpose (text-to-music via an API) but metadata and declared requirements are inconsistent and the runtime will download arbitrary URLs returned by the remote API, which raises provenance and safety concerns.

Purpose & Capability

The script implements a music-generation client that uses MINIMAX_API_KEY and talks to an API host (api.minimaxi.com), which aligns with the skill description. However, the registry metadata did not declare MINIMAX_API_KEY as a required environment variable (declared required env vars: none), and _meta.json ownerId/name fields differ from the registry owner; these mismatches reduce confidence in provenance/documentation completeness.

Instruction Scope

SKILL.md instructs running the included Python script and installing requests, which is appropriate. The script only uses MINIMAX_API_KEY and network calls to api.minimaxi.com. One important behavior: the script accepts a download_url from the API response and will fetch and write that arbitrary URL to disk — expected for file retrieval but it means whatever URL the API returns will be downloaded (possible SSRF/unsanitized remote fetch risk).

Install Mechanism

No install spec; the skill is instruction-only with a small included script and requires python3 and the requests package. This low-risk install model writes no installers or external binaries.

Credentials

The code requires a single API key (MINIMAX_API_KEY) which is proportional to the described functionality, but the registry did not list this env var or a primary credential. That mismatch (declared requirements vs. actual runtime needs) is a documentation/provenance concern and could mislead users about what secrets are exposed to the skill.

Persistence & Privilege

The skill is not marked always:true, does not request persistent system privileges, and does not modify other skills' configs. It runs as an invoked script only.

What to consider before installing

This skill's code appears to do what it says (call a remote music-generation API and save an MP3), but pay attention to three things before installing: (1) The registry metadata does not declare the required MINIMAX_API_KEY — verify where the API key should come from and that you trust the provider. (2) The source/homepage is unknown and owner fields are inconsistent — prefer skills with clear provenance or inspect the code yourself. (3) The script will download whatever download_url the API returns and write it to disk; run the skill in an isolated environment or sandbox, and ensure network egress policies are acceptable to avoid accidental retrieval of internal resources. If you need higher assurance, ask the publisher for a canonical homepage/release or run the small script in a controlled test environment and review responses from api.minimaxi.com before using production credentials.

MiniMax 音乐生成

使用 MiniMax 音乐生成 API，根据文本描述生成音乐。

支持的模型

模型	说明
music-02	最新音乐生成模型，支持多种风格
music-2.5+	乐器解锁，跨风格融合
music-2.5	人声+多乐器，专业录音棚质量

前置要求

• Python 3
• pip3 install requests
• 设置环境变量 MINIMAX_API_KEY

使用方法

# 生成音乐
python3 {baseDir}/scripts/music_gen.py \
  --prompt "A relaxing piano melody with soft strings, classical style, peaceful morning" \
  --output relax_music.mp3

# 指定模型和歌词
python3 {baseDir}/scripts/music_gen.py \
  --model music-02 \
  --prompt "欢快的中国风音乐，二胡和笛子合奏" \
  --lyrics "春风吹过来，百花盛开" \
  --output chinese_music.mp3

参数说明

参数	说明	默认值
--model	模型名称	music-02
--prompt	音乐描述文本	-
--lyrics	歌词（可选）	-
--output	输出文件路径	output.mp3