minimax-img

Use MiniMax image-01 model to generate images from text prompts. Supports high-quality PNG output, downloaded from Hailuo CDN. Install when needed.

This package largely does what it says (generate images via MiniMax) but there are some red flags to consider before installing: 1) The registry metadata does not list MINIMAX_API_KEY even though the script requires it — confirm you trust the source before handing over an API key. 2) The included script also supports TTS (text-to-speech) which is not advertised in the README/SKILL.md; if you don't want TTS functionality present, avoid installing. 3) The script uses tempfile.mktemp (insecure) to create temporary files; run it in a sandbox or review/patch the code to use tempfile.mkstemp or NamedTemporaryFile to avoid race conditions. 4) The script performs outbound network calls and downloads images from CDN URLs returned by the API — ensure your environment allows such egress and that the key you provide has limited permissions. If you plan to use this skill, verify the MINIMAX_API_KEY's scope, confirm the publisher is trustworthy, and consider running the script in an isolated environment first.

Type: OpenClaw Skill Name: minimax-img Version: 1.0.0 The skill is a legitimate integration for the MiniMax AI platform, providing image generation and text-to-speech capabilities via the `scripts/minimax_media.py` script. It correctly handles API authentication through environment variables and uses standard libraries like `requests` for API communication. While it uses the deprecated `tempfile.mktemp()` function (a minor security vulnerability), there is no evidence of malicious intent, data exfiltration, or prompt injection.