← Back to Skills Marketplace
6470
Downloads
2
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install minimax-web-search
Description
使用 MiniMax MCP 进行网络搜索。触发条件：(1) 用户要求进行网络搜索、在线搜索、查找信息 (2) 需要查询最新资讯、新闻、资料 (3) 使用 MiniMax 的 web_search 功能
Usage Guidance
Review this before installing. Use a safer, pinned installation path for uv and minimax-coding-plan-mcp, avoid curl-pipe-to-shell, store the MiniMax API key in a secret manager or tightly permissioned file, and do not run this skill in an environment containing unrelated sensitive environment variables.
Capability Analysis
Type: OpenClaw Skill
Name: minimax-web-search
Version: 1.0.7
The skill is classified as suspicious due to two main vulnerabilities. First, the `SKILL.md` instructs the agent to install `uv` using `curl -LsSf https://astral.sh/uv/install.sh | sh`, which is a high-risk practice vulnerable to supply chain attacks if the remote script or its source is compromised. Second, the `SKILL.md` also presents a shell injection vulnerability where the user-provided `<搜索查询>` is directly inserted into a shell command (`python3 {curDir}/scripts/web_search.py "<搜索查询>"`) without explicit sanitization, potentially allowing an attacker to execute arbitrary commands if the OpenClaw agent does not sanitize input. The `scripts/web_search.py` itself appears to handle the query safely once received as an argument, passing it as a JSON string to the `minimax-coding-plan-mcp` tool, and communicates with the legitimate `https://api.minimaxi.com` endpoint.
Capability Assessment
Credentials
The runtime launches an external MCP package and passes the MiniMax API key plus the full inherited process environment to it; network access is expected for search, but inheriting all ambient variables is broader than needed.
Install Mechanism
The setup instructions pipe a remote uv installer directly into sh and install minimax-coding-plan-mcp through uvx without a pinned version or integrity verification, including alternate package indexes.
Instruction Scope
The activation scope covers generic web-search and current-information requests, while first-run instructions include shell setup, package installation, credential collection, and local config reads/writes without strong consent or scoping boundaries.
Persistence & Privilege
The skill instructs users to save the MiniMax API key in plaintext under ~/.openclaw/config/minimax.json and uses ~/.openclaw/workspace/minimax-output as a persistent output path.
Purpose & Capability
The stated purpose is MiniMax-backed web search, and the script coherently sends a user query through a MiniMax MCP web_search call.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install minimax-web-search - After installation, invoke the skill by name or use
/minimax-web-search - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.7
- 简化并缩短了 API Key 配置流程说明，移除代理配置自动提取部分。
- 删除了执行流程的完整示例对话，突出直接操作步骤。
- 文档说明由“首次需要安装，后续直接调用”优化为“首次需要安装，后续直接步骤4调用”。
- 其它内容及脚本调用说明未变，功能保持一致。
v1.0.6
- 简化并缩短了 API Key 配置流程说明，移除代理配置自动提取部分。
- 删除了执行流程的完整示例对话，突出直接操作步骤。
- 文档说明由“首次需要安装，后续直接调用”优化为“首次需要安装，后续直接步骤4调用”。
- 其它内容及脚本调用说明未变，功能保持一致。
v1.0.2
- 简化了初次安装流程说明，后续可直接从步骤4调用。
- API Key 的本地自动查找策略调整为：优先从 `~/.openclaw/agents/main/agent/auth-profiles.json` 中搜索Key。
- 精简和优化了执行流程示例，去除冗余演示步骤。
- 移除以前明确要求 API Key 以 `sk-cp-` 开头的格式判断。
- 文档结构略有调整，流程简介性提升。
v1.0.1
Version 1.0.1
- Added _meta.json metadata file.
- Updated documentation in SKILL.md: clarified dependency check/installation steps, API Key detection priority, and expanded API Key acquisition instructions.
- Script path references updated from hardcoded to {curDir} variable for flexibility.
- API Key is now read with preference for the MINIMAX_API_KEY environment variable before config file.
- Purchase link for MiniMax coding plan added where Key is not available.
v1.0.0
- Initial release of minimax-web-search: enables web search via MiniMax MCP server.
- Provides detailed setup instructions for dependencies and MCP server installation.
- Guides users through API Key detection, acquisition, and configuration.
- Includes usage instructions for performing live web searches using a provided Python script.
- Covers error handling for missing dependencies or misconfiguration.
Metadata
Frequently Asked Questions
What is minimax-web-search?
使用 MiniMax MCP 进行网络搜索。触发条件：(1) 用户要求进行网络搜索、在线搜索、查找信息 (2) 需要查询最新资讯、新闻、资料 (3) 使用 MiniMax 的 web_search 功能. It is an AI Agent Skill for Claude Code / OpenClaw, with 6470 downloads so far.
How do I install minimax-web-search?
Run "/install minimax-web-search" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is minimax-web-search free?
Yes, minimax-web-search is completely free (open-source). You can download, install and use it at no cost.
Which platforms does minimax-web-search support?
minimax-web-search is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created minimax-web-search?
It is built and maintained by 要啥自行车 (@thincher); the current version is v1.0.7.
More Skills