Minimax Web Search

使用 MiniMax Coding Plan API 进行网页搜索和图像理解。当用户要求搜索信息、查找资料、或者询问实时内容时使用搜索功能；当用户要求识图、分析图片、描述图片内容时使用 understand_image 功能。触发词：搜索、查找、search、look up、识图、分析图片、图片里是什么

This skill will send your search queries and any images you provide to api.minimaxi.com using a hard-coded API key embedded in the provided scripts. That means: (1) your data is handled under someone else's account (billing and access belong to the key owner), (2) sensitive queries or images could be observed by the key owner, and (3) you cannot easily use your own credentials without editing the code. Before installing or running: review and remove the hard-coded MINIMAX_API_KEY (replace with your own key stored in an environment variable), verify the API host and the key owner's trustworthiness, avoid sending sensitive images or data, and request source/author information or a homepage. If you already ran these scripts with sensitive data, consider that data exposed and ask the maintainer to revoke/rotate the embedded key. If the author cannot justify embedding the key, treat the package as untrusted.

Type: OpenClaw Skill Name: minimax-cp-search Version: 1.1.0 The skill contains a hardcoded, plaintext API key (MINIMAX_API_KEY) within both scripts/mmsearch.py and scripts/mmvision.py, which is a significant security vulnerability. While the scripts appear to perform their stated functions of web search and image analysis using the MiniMax MCP server, the use of 'uvx' to dynamically fetch and execute a remote package at runtime poses a potential supply chain risk.