← Back to Skills Marketplace
5695
Downloads
2
Stars
60
Active Installs
5
Versions
Install in OpenClaw
/install minimax-web-search
Description
使用 MiniMax MCP 进行网络搜索。触发条件：(1) 用户要求进行网络搜索、在线搜索、查找信息 (2) 需要查询最新资讯、新闻、资料 (3) 使用 MiniMax 的 web_search 功能
Usage Guidance
Review before installing. Use a dedicated MiniMax API key with limited billing exposure, avoid running the documented key-check command unless it is changed to mask the key, and prefer setting the key through a secure secret mechanism instead of plaintext config. Verify the uv installer and minimax-coding-plan-mcp package source, and avoid placing private data in search queries.
Capability Analysis
Type: OpenClaw Skill
Name: minimax-web-search
Version: 1.0.7
The skill is classified as suspicious due to two main vulnerabilities. First, the `SKILL.md` instructs the agent to install `uv` using `curl -LsSf https://astral.sh/uv/install.sh | sh`, which is a high-risk practice vulnerable to supply chain attacks if the remote script or its source is compromised. Second, the `SKILL.md` also presents a shell injection vulnerability where the user-provided `<搜索查询>` is directly inserted into a shell command (`python3 {curDir}/scripts/web_search.py "<搜索查询>"`) without explicit sanitization, potentially allowing an attacker to execute arbitrary commands if the OpenClaw agent does not sanitize input. The `scripts/web_search.py` itself appears to handle the query safely once received as an argument, passing it as a JSON string to the `minimax-coding-plan-mcp` tool, and communicates with the legitimate `https://api.minimaxi.com` endpoint.
Capability Assessment
Purpose & Capability
The stated purpose is MiniMax-backed web search, and the script calls the MiniMax MCP web_search tool against api.minimaxi.com. Sending search queries and a MiniMax API key to that integration is purpose-aligned, but it is still an external-provider data flow.
Instruction Scope
The setup instructions check configuration by printing the stored api_key value to stdout, which can expose the secret in terminal output, logs, or agent context. The broad trigger for routine web-search requests also makes this credential-handling flow more likely to run without the user explicitly choosing this provider.
Install Mechanism
The skill instructs installation of uv via a remote shell script and installs minimax-coding-plan-mcp without a pinned version. This is disclosed and related to the integration, but it relies on external code outside the reviewed artifacts.
Credentials
The script loads a MiniMax API key from MINIMAX_API_KEY or ~/.openclaw/config/minimax.json, then launches uvx minimax-coding-plan-mcp with the full inherited environment plus MiniMax variables. Using the key is expected, but passing the whole environment to an external subprocess is broader than necessary.
Persistence & Privilege
The skill tells the agent to save the MiniMax API key in plaintext under ~/.openclaw/config/minimax.json and use ~/.openclaw/workspace/minimax-output for output. There is no background persistence or privilege escalation, but long-term plaintext credential storage is under-disclosed for a search skill.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install minimax-web-search - After installation, invoke the skill by name or use
/minimax-web-search - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.7
- 简化并缩短了 API Key 配置流程说明，移除代理配置自动提取部分。
- 删除了执行流程的完整示例对话，突出直接操作步骤。
- 文档说明由“首次需要安装，后续直接调用”优化为“首次需要安装，后续直接步骤4调用”。
- 其它内容及脚本调用说明未变，功能保持一致。
v1.0.6
- 简化并缩短了 API Key 配置流程说明，移除代理配置自动提取部分。
- 删除了执行流程的完整示例对话，突出直接操作步骤。
- 文档说明由“首次需要安装，后续直接调用”优化为“首次需要安装，后续直接步骤4调用”。
- 其它内容及脚本调用说明未变，功能保持一致。
v1.0.2
- 简化了初次安装流程说明，后续可直接从步骤4调用。
- API Key 的本地自动查找策略调整为：优先从 `~/.openclaw/agents/main/agent/auth-profiles.json` 中搜索Key。
- 精简和优化了执行流程示例，去除冗余演示步骤。
- 移除以前明确要求 API Key 以 `sk-cp-` 开头的格式判断。
- 文档结构略有调整，流程简介性提升。
v1.0.1
Version 1.0.1
- Added _meta.json metadata file.
- Updated documentation in SKILL.md: clarified dependency check/installation steps, API Key detection priority, and expanded API Key acquisition instructions.
- Script path references updated from hardcoded to {curDir} variable for flexibility.
- API Key is now read with preference for the MINIMAX_API_KEY environment variable before config file.
- Purchase link for MiniMax coding plan added where Key is not available.
v1.0.0
- Initial release of minimax-web-search: enables web search via MiniMax MCP server.
- Provides detailed setup instructions for dependencies and MCP server installation.
- Guides users through API Key detection, acquisition, and configuration.
- Includes usage instructions for performing live web searches using a provided Python script.
- Covers error handling for missing dependencies or misconfiguration.
Metadata
Frequently Asked Questions
What is minimax-web-search?
使用 MiniMax MCP 进行网络搜索。触发条件：(1) 用户要求进行网络搜索、在线搜索、查找信息 (2) 需要查询最新资讯、新闻、资料 (3) 使用 MiniMax 的 web_search 功能. It is an AI Agent Skill for Claude Code / OpenClaw, with 5695 downloads so far.
How do I install minimax-web-search?
Run "/install minimax-web-search" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is minimax-web-search free?
Yes, minimax-web-search is completely free (open-source). You can download, install and use it at no cost.
Which platforms does minimax-web-search support?
minimax-web-search is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created minimax-web-search?
It is built and maintained by 要啥自行车 (@thincher); the current version is v1.0.7.
More Skills