Skill flagged — review recommended

ClawHub Security found sensitive or high-impact capabilities. Review the scan results before using.

Minimax Video

Use Zhipu (智谱) web search API for searching the internet. Use when user asks for web search, latest news, or needs current information.

Audits

Suspicious

Install

openclaw skills install minimax-video

Zhipu Web Search

Use Zhipu's web search API to search the internet.

⚠️ Security Requirements

This skill requires MINIMAX_API_KEY environment variable to be set before use.

Security Best Practices:

  1. DO NOT store API keys in ~/.bashrc - keys can be leaked
  2. DO NOT source shell configuration files - prevents arbitrary code execution
  3. Set environment variable directly when running the script
  4. Be aware API key will be visible in process list (ps aux)

Setup

# Set API key as environment variable
export MINIMAX_API_KEY="your_api_key"

Get your API key from: https://www.bigmodel.cn/usercenter/proj-mgmt/apikeys

Usage

Quick Search

export MINIMAX_API_KEY="your_key"

curl -s -X POST "https://open.bigmodel.cn/api/paas/v4/chat/completions" \
  -H "Authorization: Bearer $MINIMAX_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "glm-4-flash",
    "messages": [{"role": "user", "content": "搜索: YOUR_QUERY"}],
    "tools": [{"type": "web_search", "web_search": {"search_query": "YOUR_QUERY"}}]
  }' | jq -r '.choices[0].message.content'

Using the Script

export MINIMAX_API_KEY="your_key"
./search.sh "搜索内容"

Security Analysis

✅ What's Safe:

  • No sourcing of ~/.bashrc or shell config files
  • Uses jq for JSON escaping (prevents injection)
  • Uses HTTPS with TLS 1.2+
  • API key via environment variable (not hardcoded)
  • Proper error handling - sensitive info not leaked
  • Input validation (query length limit)
  • Generic error messages (no path/file hints)

⚠️ Considerations:

  • Process list visibility: API key visible in ps aux
    • Use in trusted environments only
  • Endpoint: https://open.bigmodel.cn (official Zhipu API)

Safety Features

FeatureImplementation
JSON escapingjq --arg prevents injection
Input validationQuery length ≤500 chars
TLSForce TLS 1.2+
Error handlingGeneric messages, no leaks
Timeout30 second curl timeout

When to Use

  • User says "search for", "look up", "find information about"
  • User asks "what's the latest news about"
  • User needs current information from the web

API Endpoint

Official: https://open.bigmodel.cn/api/paas/v4/chat/completions