web-search-minimax

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:19 PM UTC
• Version:
  1.0.0

Overview

This is a straightforward Minimax web search helper, with the main caution that search terms are sent to Minimax using your API key.

Install only if you are comfortable sending search terms to Minimax and giving the skill access to a Minimax API key through the environment. Avoid putting secrets, credentials, confidential project names, or sensitive personal data in search queries, and prefer a dedicated API key if available.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill clearly routes user-provided search queries to an external third-party API, but the documentation does not warn users that their input leaves the local environment. This can lead to unintended disclosure of sensitive prompts, internal project names, credentials, or personal data if users assume the search is local or privacy-preserving.

VirusTotal

66/66 vendors flagged this skill as clean.