← 返回 Skills 市场
119
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install minimax-cli
功能描述
MiniMax AI platform CLI — text, image, video, speech, music, vision, and web search from terminal or AI agents. Use when generating multimedia content (image...
安全使用建议
Proceed with caution. The SKILL.md instructs installing and running a third-party npm package and requires an API key and local config, but the skill metadata does not declare those requirements — this mismatch is suspicious. Before installing: (1) verify the mmx-cli package on the npm registry and its source repository (check publisher, recent changes, and whether it’s the official MiniMax release), (2) do not supply a high‑privilege or production API key; use a limited-scope key or test account, (3) inspect the package code (or run it in a disposable sandbox/container) to see how it stores/transmits keys (it references ~/.mmx/config.json and MINIMAX_API_KEY), and (4) prefer an official homepage or vendor documentation — the registry entry lacks a homepage. If you can provide the npm package URL or the package source repo, I can do a more precise assessment.
功能分析
Type: OpenClaw Skill
Name: minimax-cli
Version: 1.0.0
The skill bundle documentation (SKILL.md) instructs the AI agent to perform a high-risk global installation of an unverified npm package ('mmx-cli') and provides instructions for authenticating with sensitive API keys. A major indicator of potential malice is the reference to 'api.minimaxi.com' in 'references/api-notes.md', which appears to be a typo-squat of the official MiniMax AI domain (minimax.io), suggesting a possible credential harvesting or exfiltration attempt. While these are strong signals of a supply chain or phishing attack, the bundle itself contains only documentation and no executable code to confirm intentional harm.
能力评估
Purpose & Capability
Name/description and the SKILL.md content are consistent: this is a CLI helper for the MiniMax platform. However, the skill instructs installing an external npm package (mmx-cli) and expects an API key and local config, yet the registry metadata declares no required environment variables or config paths — an incoherence between claimed requirements and actual usage.
Instruction Scope
The instructions tell users/agents to run `npm install -g mmx-cli` and to perform authenticated CLI actions (mmx auth login --api-key ...), reference an on-disk config (~/.mmx/config.json) and the MINIMAX_API_KEY env var. Those sensitive artifacts are not declared in the skill's metadata. The SKILL.md tells the agent to install and execute third-party code and to write/read local config, which expands scope beyond a harmless instruction-only helper.
Install Mechanism
There is no formal install spec in the skill bundle, but the guidance explicitly directs a global npm install of `mmx-cli`. Installing a third-party npm package executes network-downloaded code on the host and is a non-trivial risk. Because no package source/homepage is supplied in the registry metadata, the origin and integrity of that npm package cannot be verified from the skill bundle alone.
Credentials
The SKILL.md and api-notes reference an API key (example sk-xxxxx), the MINIMAX_API_KEY env var, and a config file (~/.mmx/config.json), but the skill metadata lists no required env vars or config paths. Requesting API credentials and local config access is reasonable for a CLI that calls a remote service, but it should be declared; the omission is a mismatch that could hide credential exfiltration risks.
Persistence & Privilege
The skill does not request always:true and does not claim to modify other skills or system-wide settings. Autonomous invocation is allowed (default) which is normal. The main persistence risk comes from installing the external npm package, not from the skill metadata itself.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install minimax-cli - 安装完成后，直接呼叫该 Skill 的名称或使用
/minimax-cli触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release - full CLI coverage: text, image, video, speech, music, vision, search
元数据
常见问题
MiniMax CLI 是什么？
MiniMax AI platform CLI — text, image, video, speech, music, vision, and web search from terminal or AI agents. Use when generating multimedia content (image... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 119 次。
如何安装 MiniMax CLI？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install minimax-cli」即可一键安装，无需额外配置。
MiniMax CLI 是免费的吗？
是的，MiniMax CLI 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
MiniMax CLI 支持哪些平台？
MiniMax CLI 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 MiniMax CLI？
由 Tyler（@tylerdotai）开发并维护，当前版本 v1.0.0。
推荐 Skills