← Back to Skills Marketplace

MiniMax MCP Call

Name: MiniMax MCP Call
Author: russellfei

by russellfei · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

813

Downloads

Stars

Active Installs

Versions

Install in OpenClaw

/install minimax-mcp-call

Description

MiniMax MCP tools - Web search and image understanding via MiniMax Coding Plan. Use when user needs web search, current information, or image analysis. Requi...

Usage Guidance

This skill appears to do what it says: it launches a local MCP process (uvx) and forwards your MINIMAX_API_KEY so the MCP can perform web searches and image analysis. Before installing: - Review the remote installer it asks you to run (https://astral.sh/uv/install.sh). Don't run curl | sh unless you trust the source; inspect the script first or install 'uv' from a trusted package channel. - Be aware the skill stores your API key in ~/.openclaw/.env and exports it to the spawned uvx process. If the 'uvx' binary or the MCP server is compromised, your key could be exposed — prefer a scoped/revokable key. - Confirm the MINIMAX_API_HOST value (default https://api.minimaxi.com) is correct for the service you expect. - If you want extra safety, run this skill inside a sandboxed environment or container, or create a dedicated API key with limited permissions and rotate it if needed.

Capability Analysis

Type: OpenClaw Skill Name: minimax-mcp-call Version: 1.0.0 The skill is classified as suspicious primarily due to the installation instructions in `SKILL.md` and `README.md` that use `curl -LsSf https://astral.sh/uv/install.sh | sh` (and a PowerShell equivalent). This method of remote script execution (`curl | sh`) introduces a significant supply chain risk and potential Remote Code Execution (RCE) vulnerability, as it relies on the integrity of the `astral.sh` domain and script. While `uv` is a legitimate tool, this installation practice is inherently risky. The core logic in `scripts/mcp_search.sh` and `scripts/mcp_client.mjs` appears robust against command injection, passing user inputs as data within JSON-RPC calls rather than directly executing them.

Capability Assessment

✓ Purpose & Capability

The skill claims web search and image understanding and includes a client that calls tools named web_search and understand_image via a local MCP process. Required items (MINIMAX_API_KEY, optional MINIMAX_API_HOST, Node.js, and the 'uv' runtime/uvx binary) line up with that purpose.

✓ Instruction Scope

SKILL.md and the wrapper script limit actions to installing 'uv', storing/loading MINIMAX_API_KEY in ~/.openclaw/.env, and launching the provided Node.js client. The scripts only read the declared ~/.openclaw/.env and do not attempt to read unrelated system paths or other credentials.

⚠ Install Mechanism

There is no formal install spec in the manifest; SKILL.md instructs users to run a remote install (curl | sh) from https://astral.sh/uv/install.sh to install 'uv'. Running arbitrary remote install scripts is higher risk — verify the source and script contents before executing.

✓ Credentials

Only MINIMAX_API_KEY and MINIMAX_API_HOST are used; these are required and used by the client and forwarded to the spawned 'uvx' process. The quantity and naming of env vars are proportional to the stated functionality.

✓ Persistence & Privilege

The skill is not automatically always-enabled and does not request persistent platform privileges. It writes/reads credentials to a user-scoped file (~/.openclaw/.env) which is expected for storing an API key; it does not modify other skills or system-wide settings.

How to Use

Make sure OpenClaw is installed (local or Docker)
Run the install command in chat: /install minimax-mcp-call
After installation, invoke the skill by name or use /minimax-mcp-call
Provide required inputs per the skill's parameter spec and get structured output

Version History

v1.0.0

Initial release

Metadata

Slug minimax-mcp-call

Version 1.0.0

License —

All-time Installs 5

Active Installs 5

Total Versions 1

Frequently Asked Questions

What is MiniMax MCP Call?

MiniMax MCP tools - Web search and image understanding via MiniMax Coding Plan. Use when user needs web search, current information, or image analysis. Requi... It is an AI Agent Skill for Claude Code / OpenClaw, with 813 downloads so far.

How do I install MiniMax MCP Call?

Run "/install minimax-mcp-call" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is MiniMax MCP Call free?

Yes, MiniMax MCP Call is completely free (open-source). You can download, install and use it at no cost.

Which platforms does MiniMax MCP Call support?

MiniMax MCP Call is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created MiniMax MCP Call?

It is built and maintained by russellfei (@russellfei); the current version is v1.0.0.

More Skills