Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

MiniMax Quota Query

v1.0.0

MiniMax Token Plan 额度查询工具。当需要查询 MiniMax API 使用量、剩余配额、额度重置时间时使用。支持查询 M2.7 文本、image-01 图片、Hailuo 视频、music-2.5 音乐、speech 语音等模型的用量。触发场景:用户问"查一下 MiniMax 额度"、"Toke...

0· 114·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for hongjiahao371-pixel/minimax-quota.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "MiniMax Quota Query" (hongjiahao371-pixel/minimax-quota) from ClawHub.
Skill page: https://clawhub.ai/hongjiahao371-pixel/minimax-quota
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install minimax-quota

ClawHub CLI

Package manager switcher

npx clawhub@latest install minimax-quota
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
The name/description state it queries MiniMax Token Plan and the included script and curl examples do exactly that against https://www.minimaxi.com/.... However the registry metadata does not declare the required credential or runtime even though the SKILL.md and script expect an API key (MINIMAX_API_KEY) and a Python 3 interpreter. The missing declaration is an inconsistency.
Instruction Scope
SKILL.md and scripts instruct only to call the stated MiniMax endpoint and to format/print returned quota data. The code does not read unrelated files, contact other endpoints, or attempt to access unrelated system state.
Install Mechanism
There is no install spec (instruction-only with an included script). The script is small, uses the standard library (urllib), and will not write or execute additional downloaded code. Note: it expects a Python 3 runtime to be available.
!
Credentials
The skill legitimately requires a single bearer token (MINIMAX_API_KEY) to call the MiniMax API, which is proportionate. However, the registry metadata does not list this required env var or a primary credential, so the manifest understates the secret access the skill needs. That omission reduces transparency and is a red flag.
Persistence & Privilege
The skill does not request persistent/global privileges (always is false) and does not modify other skills or system-wide settings. It only runs as invoked.
What to consider before installing
This skill appears to do what it says: call MiniMax's quota endpoint and print results. Before installing or running it, confirm the MiniMax endpoint/domain is legitimate and trusted (https://www.minimaxi.com). Do not paste your API key into unknown packages; prefer running the provided script locally so you control the environment and can inspect requests. Ask the publisher to update the package metadata to declare MINIMAX_API_KEY (and that Python 3 is required) so the need for a secret is explicit. If you must provide a key, ensure it has minimal scope and rotate it afterward if you become uncertain. Finally, note the odd 'uv run' invocation in the README — the script itself requires python3; verify how your agent/runtime will execute it.

Like a lobster shell, security has layers — review code before you run it.

latestvk97b2r3zn48tm8qn358xqq53zd83ce04
114downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

MiniMax Quota Query

查询 MiniMax Token Plan 当前用量和剩余配额。

API 信息

Endpoint: https://www.minimaxi.com/v1/api/openplatform/coding_plan/remains

认证: Bearer Token (Token Plan API Key)

重要:字段含义

⚠️ 关键发现: current_interval_usage_count 字段表示的是剩余配额,不是已用量!

已用量 = current_interval_total_count - current_interval_usage_count
剩余配额 = current_interval_usage_count

使用方法

直接 curl 查询

curl -s --location 'https://www.minimaxi.com/v1/api/openplatform/coding_plan/remains' \
  --header 'Authorization: Bearer <API_KEY>' \
  --header 'Content-Type: application/json'

使用脚本查询

uv run python3 scripts/query.py <API_KEY>

或设置环境变量后直接运行:

export MINIMAX_API_KEY="your_api_key"
uv run python3 scripts/query.py

输出示例

==================================================
 MiniMax Token Plan 用量查询
==================================================

【MiniMax-M2.7】
 5小时窗口:已用 1103 / 4500(24%)剩余 3397 次
 本周:已用 0 / 0(0%)剩余 0 次
 窗口:03-22 20:00 ~ 00:00
 重置:约 399 小时后

【image-01】
 5小时窗口:已用 1 / 120(0%)剩余 119 次
 本周:已用 1 / 840(0%)剩余 839 次

模型额度参考

模型每日/窗口配额重置周期
M2.7 文本4500次/5小时滚动重置
image-01 图片120张/日每日重置
Hailuo-2.3 视频2个/日每日重置
music-2.5 音乐4首/日每日重置
TTS HD 语音11000字符/日每日重置

Comments

Loading comments...