MiniMax AI音乐生成

MiniMax AI 音乐生成技能。使用 MiniMax API 生成歌词、合成歌曲、批量生成样本曲目、支持纯音乐和人声歌曲。可用风格：古风、摇滚、流行、钢琴、催眠等。当用户要求"生成音乐"、"写首歌"、"生成歌词"、"合成歌曲"、"批量生成BGM样本"时触发。

Do not install or run this skill until the API key issue is resolved. Specifically: (1) Ask the publisher why a cleartext API key is embedded and for proof that it is safe to use; (2) insist the script be changed to require the user to provide their own API key (via env var or prompt) rather than using a baked-in key; (3) if you already ran it, consider the embedded key compromised — rotate/disable it (if it's yours) and monitor for unauthorized use; (4) verify the MiniMax API domain and the publisher's reputation before providing your own credentials; (5) if you need the skill, prefer a version that documents required environment variables (e.g., MINIMAX_API_KEY) and does not contain secrets in code.

Type: OpenClaw Skill Name: minimax-music-ai Version: 1.0.0 The skill bundle contains a hardcoded MiniMax API key in 'scripts/generate.py', which is a significant credential exposure vulnerability. The script also utilizes 'subprocess.run' to execute 'ffmpeg' with the '-safe 0' flag for audio merging; while this is functional for the stated purpose, it represents a high-risk capability that could be exploited if input filenames are not strictly controlled. No evidence of intentional malicious behavior or data exfiltration was found.