MiniMax Speech 2.8
ReviewAudited by ClawScan on May 1, 2026.
Overview
MiniMax Speech 2.8 appears to be a coherent TTS helper, with expected API-key and third-party data-sharing risks that should be handled carefully.
Before installing, be comfortable providing a MiniMax API key and sending TTS text to MiniMax. Use trusted MiniMax endpoints only, install dependencies in a controlled Python environment, and choose output paths deliberately.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If an untrusted endpoint were used, the user's MiniMax API key and request text could be sent outside MiniMax.
The CLI lets callers override the API endpoint, and the same authenticated request is sent to whatever endpoint is selected.
tts_parser.add_argument("--endpoint", default="https://api.minimax.io/v1/t2a_v2" ...); response = requests.post(args.endpoint, headers=headers, json=payload, timeout=args.timeout)Use the default endpoint or verified MiniMax regional endpoints only, and do not follow prompt-provided endpoint changes unless the user explicitly approves them.
API calls may use the user's MiniMax account, quota, and billing context.
The skill requires a service API key to make MiniMax requests; this is expected for the integration, but it is sensitive account authority.
Export `MINIMAX_API_KEY` with the API key the user promised to supply. The script will refuse to run without it.
Set the API key only in a trusted environment, use a scoped or rotatable key if MiniMax supports it, and update metadata to declare `MINIMAX_API_KEY`.
Installing dependencies from an untrusted or changed package source can affect the execution environment.
The skill depends on installing an external Python package manually; this is normal for the helper's purpose but is not captured in an install spec or pinned version.
Run `pip install requests` in the environment that will execute the script.
Install `requests` from a trusted package index, preferably in a virtual environment, and pin a reviewed version if reproducibility matters.
Text submitted for speech synthesis leaves the local environment and is processed by MiniMax or the configured endpoint.
The TTS text is placed into a JSON payload and sent to an external provider endpoint, which is expected for this API-based TTS skill.
payload: Dict[str, Any] = {"model": args.model, "text": args.text, "stream": args.stream, "output_format": args.output_format}; response = requests.post(args.endpoint, headers=headers, json=payload, timeout=args.timeout)Avoid sending secrets or confidential text unless MiniMax's data handling terms and the selected endpoint are acceptable.