Material Generator

Generate Unreal Engine material node graphs from natural language descriptions, supporting key nodes like TextureSample, Multiply, Lerp, and MaterialOutput.

Do not install this skill without addressing the external API and the hardcoded key. Specific steps to consider: - The SKILL.md embeds an API base (api.minimaxi.com), an App URL, and a hardcoded API key; this means your prompts and possibly project data would be sent to that third party. Only proceed if you trust that endpoint and its privacy/security practices. - Ask the publisher to remove the hardcoded key and require a declared environment variable (e.g., MINIMAXI_API_KEY) so you can supply your own credential; never use the embedded key. - Verify who operates minimaxi.com and the App domain (k2lucelsen19.space.minimaxi.com). If you cannot verify ownership, avoid sending proprietary assets or code to it. - Prefer skills that declare required credentials in metadata and document what data is transmitted. If you already pasted sensitive material while testing, rotate any credentials that may have been exposed. - If you need this functionality but want safer operation, request an updated skill that uses a user-supplied API key (declared in requires.env) and documents exactly what is posted to the remote API.

Type: OpenClaw Skill Name: material-generator Version: 1.0.0 The skill bundle contains a hardcoded API key (sk-cp-...) for the MiniMax API within the SKILL.md file. While the bundle's stated purpose is a legitimate Unreal Engine material generator, the exposure of sensitive credentials in documentation is a high-risk security vulnerability. No explicit malicious logic or data exfiltration code was identified in the provided files.