← 返回 Skills 市场
238
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install minimax-cp
功能描述
使用 MiniMax Coding Plan API 进行网页搜索和图像理解。当用户要求搜索信息、查找资料、或者询问实时内容时使用搜索功能;当用户要求识图、分析图片、描述图片内容时使用 understand_image 功能。触发词:搜索、查找、search、look up、识图、分析图片、图片里是什么
安全使用建议
This skill's code matches its stated purpose, but it includes a hard-coded MiniMax API key and host in both scripts. That means calls made by the skill will be attributed to that embedded key (someone else controls it) and could be logged or abused. Before installing, ask the author why a key is embedded; prefer a version that reads MINIMAX_API_KEY from the user's environment or remove the embedded key and supply your own. Verify and audit the 'uvx' and 'minimax-coding-plan-mcp' binaries before running them (run in a sandbox if possible). If you proceed, rotate any exposed keys you control, or better: do not use the skill until the hardcoded credential is removed and installation instructions for dependencies are provided. If you need help, request the package author to publish a non-credentialized version or to explain the key ownership and privacy implications.
功能分析
Type: OpenClaw Skill
Name: minimax-cp
Version: 1.2.0
The scripts mmsearch.py and mmvision.py contain a hardcoded MINIMAX_API_KEY, which is a significant security risk and potential credential leak. Additionally, both scripts use 'uvx' to dynamically download and execute the 'minimax-coding-plan-mcp' package without version pinning, which introduces a supply-chain risk. While these behaviors are documented in SKILL.md as intended for ease of use, the combination of hardcoded secrets and unverified remote execution constitutes high-risk behavior.
能力评估
Purpose & Capability
Name/description align with the included scripts: both mmsearch.py and mmvision.py call MiniMax MCP tools for web_search and understand_image. However, the scripts embed a provider API key and host directly in code instead of requiring the user's credential; this is unexpected and not necessary for the stated purpose (a user-provided MINIMAX_API_KEY would be appropriate). Registry metadata listed no required env vars while SKILL.md and the scripts reference MINIMAX_API_KEY—an inconsistency.
Instruction Scope
SKILL.md instructs the agent to run the two scripts which only communicate via stdio with a subprocess (uvx + minimax-coding-plan-mcp). The scripts do not read local files beyond receiving a CLI argument, but they forcibly set os.environ MINIMAX_API_KEY and MINIMAX_API_HOST (overwriting any existing values) and launch an external process that will contact the provider. The instructions therefore cause outbound network calls using an embedded credential and give the skill covert ability to attribute traffic to that key.
Install Mechanism
There is no install spec (instruction-only with code files). That limits disk writes from an installer. However the scripts depend on 'uvx' and 'minimax-coding-plan-mcp' being present and call them without guidance on installation; if installed later, they will execute external binaries, so verify those packages before use.
Credentials
Both scripts hard-code a long-looking secret value into MINIMAX_API_KEY and set MINIMAX_API_HOST. This embeds a credential in the skill package and gives whoever controls that key visibility into requests made. The skill does not require user credentials but uses its own—this is disproportionate and a privacy/traceability risk.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or global agent config, and has no declared config paths. It can be invoked autonomously (platform default), which increases its blast radius when combined with the embedded credential, but autonomy alone is normal.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install minimax-cp - 安装完成后,直接呼叫该 Skill 的名称或使用
/minimax-cp触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.2.0
Version 1.2.0
- 新增中文文档,详细说明了搜索与图像理解两大功能。
- 提供典型命令行用法示例,涵盖图片描述、文字提取、内容分析。
- 明确支持图片格式:JPEG、PNG、WebP。
- 列出了依赖项与 API Key 设置要点。
- 指明各脚本功能和触发词。
元数据
常见问题
Minimax Cp 是什么?
使用 MiniMax Coding Plan API 进行网页搜索和图像理解。当用户要求搜索信息、查找资料、或者询问实时内容时使用搜索功能;当用户要求识图、分析图片、描述图片内容时使用 understand_image 功能。触发词:搜索、查找、search、look up、识图、分析图片、图片里是什么. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 238 次。
如何安装 Minimax Cp?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install minimax-cp」即可一键安装,无需额外配置。
Minimax Cp 是免费的吗?
是的,Minimax Cp 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Minimax Cp 支持哪些平台?
Minimax Cp 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Minimax Cp?
由 镜子(@mirrorpromax)开发并维护,当前版本 v1.2.0。
推荐 Skills