← Back to Skills Marketplace
915
Downloads
0
Stars
8
Active Installs
12
Versions
Install in OpenClaw
/install minimax-token-plan-tool
Description
A lightweight MiniMax Token Plan Tool skill that directly calls official MCP APIs using pure JavaScript. No external MCP servers. No subprocess invocation. D...
Usage Guidance
This skill appears to implement exactly what it claims: a Node.js client for MiniMax Token Plan APIs. Before installing: 1) Only provide a Token Plan API key (not broader credentials), and prefer a key with limited scope; 2) Understand that local images submitted will be uploaded to MiniMax—do not send sensitive or regulated images; 3) MINIMAX_API_HOST is limited to the two official hosts per SKILL.md—verify you use the correct host for your token; 4) If you require higher assurance, review the full minimax_token_plan_tool.js source (it performs DNS checks and blocks private IPs for remote image fetches) and consider running it in a sandboxed environment or with a service account whose key can be rotated. Overall the skill is coherent and proportional to its stated purpose.
Capability Analysis
Type: OpenClaw Skill
Name: minimax-token-plan-tool
Version: 1.1.5
The skill provides tools for web search, image understanding, and quota management using the MiniMax API. The implementation in minimax_token_plan_tool.js is well-structured and includes robust security measures, such as SSRF protection (blocking private IP ranges and localhost) and strict validation of API hosts. The documentation in SKILL.md transparently discloses the risk of local image data being sent to the remote API for processing, which is consistent with the tool's stated purpose.
Capability Assessment
Purpose & Capability
The skill is a Node.js tool that directly calls MiniMax Token Plan APIs. It declares node and MINIMAX_API_KEY / MINIMAX_API_HOST, which are exactly what a direct-API implementation needs. There are no unrelated credentials, binaries, or configuration paths requested.
Instruction Scope
SKILL.md and the JS implement the three documented tools (web_search, understand_image, remains). The instructions explicitly document how to run the node script, how local images are handled (converted to base64 and uploaded), and warn about outbound network/data-leak risk. The runtime actions (DNS resolution, HTTP(S) requests, file reads for local images) are consistent with the described features and do not reference or exfiltrate data to unexpected endpoints.
Install Mechanism
There is no install spec; this is instruction-plus-script only. No code is downloaded from external URLs during install and no archives are extracted. This is the lowest-risk install model and matches the skill's stated 'pure JavaScript, no external server' claim.
Credentials
Only MINIMAX_API_KEY (primary) and optional MINIMAX_API_HOST are required, which is proportionate for a direct API client. The code only reads these environment variables and does not request unrelated secrets or access to other services.
Persistence & Privilege
The skill does not request always:true and has no install steps that modify other skills or system-wide settings. It runs as an invoked Node.js script and does not persist elevated privileges or auto-enable itself.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install minimax-token-plan-tool - After installation, invoke the skill by name or use
/minimax-token-plan-tool - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.5
minimax-token-plan-tool 1.1.5
- Updated SKILL.md to clarify quota time fields
v1.1.4
minimax-token-plan-tool 1.1.4
- Updated quota usage period documentation in Tool 3 ("minimax_token_plan_remains") to clarify that all times are in UTC+0, and to specify quota intervals for each model type.
- Removed previous explicit table-based response format recommendation; now provides a concise note on interpreting reset periods and time zones.
v1.1.3
- Tightened security for image understanding: remote image fetching now restricts access to public HTTP/HTTPS URLs only, and blocks localhost, private networks, unsupported ports, and excessive redirects.
- Updated documentation to reflect these new image fetch restrictions.
v1.1.2
- Now strictly enforces accepted values for MINIMAX_API_HOST: only https://api.minimaxi.com and https://api.minimax.io are supported.
- Documentation clarifies that if MINIMAX_API_HOST is unset, it defaults to https://api.minimaxi.com.
- Other documentation references to API host options and configuration have been updated for accuracy.
v1.1.1
- Removed alternative and JSON-based OpenClaw configuration instructions from documentation for simpler setup guidance.
- Updated CLI usage examples to omit requirement for explicitly setting environment variables in command-line invocations.
- Improved separation and clarity in configuration and setup instructions.
v1.1.0
- Fix small issues
v1.0.5
- Do not use the default API host in the code
v1.0.4
minimax-token-plan-tool v1.0.4
- Rename to "minimax-token-plan-tool" with new configuration and API endpoints.
- Added support for querying remaining Token Plan usage and quota via the new minimax_token_plan_remains tool.
- The previous CLI and dynamic tool registration file (minimax_coding_plan_tool.js) was removed.
- Updated documentation for new environment variable requirements (MINIMAX_API_KEY, MINIMAX_API_HOST) and improved setup instructions.
- Now supports both China Mainland and Global MiniMax Token Plan deployments (with guidance on key/host compatibility).
v1.0.3
Modified the JS code to throw errors when encountering non-image file extensions.
v1.0.2
- Updated the skill metadata to use a new format with enhanced OpenClaw compatibility.
- Added a security notice to the image understanding tool, warning users about potential data leakage when uploading local images.
- Clarified that only mainstream image formats (JPEG/JPG, PNG, WebP, GIF) are supported for image understanding.
v1.0.1
- Added explicit support for MINIMAX_API_KEY environment variable usage in CLI examples and metadata.
- Updated documentation and tool invocation instructions to require MINIMAX_API_KEY for all commands.
- Enhanced SKILL.md metadata to specify environment and binary dependencies.
- Unified CLI examples for consistency regarding API key usage.
- Renamed implementation file to follow snake_case naming convention.
v1.0.0
Initial release of the MiniMax Coding Plan Tool skill:
- Provides lightweight JavaScript integration for MiniMax Coding Plan (MCP) APIs.
- No external MCP server, tool bridge, or subprocesses required; direct HTTPS API calls.
- Implements two tools: real-time web search (minimax_web_search) and image understanding (minimax_understand_image).
- Minimal resource usage and quick integration within OpenClaw.
- Requires a Coding Plan API key for operation.
Metadata
Frequently Asked Questions
What is MiniMax Token Plan Tool?
A lightweight MiniMax Token Plan Tool skill that directly calls official MCP APIs using pure JavaScript. No external MCP servers. No subprocess invocation. D... It is an AI Agent Skill for Claude Code / OpenClaw, with 915 downloads so far.
How do I install MiniMax Token Plan Tool?
Run "/install minimax-token-plan-tool" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is MiniMax Token Plan Tool free?
Yes, MiniMax Token Plan Tool is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does MiniMax Token Plan Tool support?
MiniMax Token Plan Tool is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created MiniMax Token Plan Tool?
It is built and maintained by Yorch (@yorch233); the current version is v1.1.5.
More Skills