MiniMax TTS 国内版

调用MiniMax语音合成API，支持中文多音色、高质量文本转语音，提供流式和非流式音频输出。

This skill mostly behaves like a normal TTS client, but review the following before installing or using it: - Verify the API endpoint: the SKILL.md homepage references platform.minimax.io, but the script calls https://api.minimaxi.com (note the extra 'i' in minimaxi). That could be a harmless typo or point to an unintended/malicious host; confirm the correct API domain with the vendor/documentation before providing an API key. - Metadata mismatch: the registry entry claims no required env vars, while SKILL.md and the script require MINIMAX_API_KEY. Prefer skills whose published metadata matches their runtime requirements. - Limit exposure: only supply an API key that you control and can revoke; do not reuse broad-scoped or production credentials. Consider creating a limited/test account on the provider for initial use. - Code review: the script decodes hex audio and writes a local file (expected). It imports subprocess but does not use it—likely harmless but worth noting. If you have doubts, run the script in an isolated environment (container/VM) and inspect network traffic to confirm it talks only to the intended API host. - If you cannot confirm the correct API host or the publisher identity, do not provide credentials or use this skill in sensitive environments.

Type: OpenClaw Skill Name: minimax-tts-cn Version: 1.0.0 The skill bundle appears benign. The `tts.py` script correctly uses `argparse` for command-line arguments, makes legitimate API calls to `api.minimaxi.com` using the `requests` library, and writes audio data to a local file. There is no evidence of data exfiltration, malicious execution (e.g., `os.system`, `subprocess.run` with unsanitized input, `eval`), persistence mechanisms, or obfuscation. The `SKILL.md` provides standard usage instructions and does not contain any prompt injection attempts against the OpenClaw agent.