← 返回 Skills 市场
russellfei

MiniMax MCP Call

作者 russellfei · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
813
总下载
1
收藏
5
当前安装
1
版本数
在 OpenClaw 中安装
/install minimax-mcp-call
功能描述
MiniMax MCP tools - Web search and image understanding via MiniMax Coding Plan. Use when user needs web search, current information, or image analysis. Requi...
安全使用建议
This skill appears to do what it says: it launches a local MCP process (uvx) and forwards your MINIMAX_API_KEY so the MCP can perform web searches and image analysis. Before installing: - Review the remote installer it asks you to run (https://astral.sh/uv/install.sh). Don't run curl | sh unless you trust the source; inspect the script first or install 'uv' from a trusted package channel. - Be aware the skill stores your API key in ~/.openclaw/.env and exports it to the spawned uvx process. If the 'uvx' binary or the MCP server is compromised, your key could be exposed — prefer a scoped/revokable key. - Confirm the MINIMAX_API_HOST value (default https://api.minimaxi.com) is correct for the service you expect. - If you want extra safety, run this skill inside a sandboxed environment or container, or create a dedicated API key with limited permissions and rotate it if needed.
功能分析
Type: OpenClaw Skill Name: minimax-mcp-call Version: 1.0.0 The skill is classified as suspicious primarily due to the installation instructions in `SKILL.md` and `README.md` that use `curl -LsSf https://astral.sh/uv/install.sh | sh` (and a PowerShell equivalent). This method of remote script execution (`curl | sh`) introduces a significant supply chain risk and potential Remote Code Execution (RCE) vulnerability, as it relies on the integrity of the `astral.sh` domain and script. While `uv` is a legitimate tool, this installation practice is inherently risky. The core logic in `scripts/mcp_search.sh` and `scripts/mcp_client.mjs` appears robust against command injection, passing user inputs as data within JSON-RPC calls rather than directly executing them.
能力评估
Purpose & Capability
The skill claims web search and image understanding and includes a client that calls tools named web_search and understand_image via a local MCP process. Required items (MINIMAX_API_KEY, optional MINIMAX_API_HOST, Node.js, and the 'uv' runtime/uvx binary) line up with that purpose.
Instruction Scope
SKILL.md and the wrapper script limit actions to installing 'uv', storing/loading MINIMAX_API_KEY in ~/.openclaw/.env, and launching the provided Node.js client. The scripts only read the declared ~/.openclaw/.env and do not attempt to read unrelated system paths or other credentials.
Install Mechanism
There is no formal install spec in the manifest; SKILL.md instructs users to run a remote install (curl | sh) from https://astral.sh/uv/install.sh to install 'uv'. Running arbitrary remote install scripts is higher risk — verify the source and script contents before executing.
Credentials
Only MINIMAX_API_KEY and MINIMAX_API_HOST are used; these are required and used by the client and forwarded to the spawned 'uvx' process. The quantity and naming of env vars are proportional to the stated functionality.
Persistence & Privilege
The skill is not automatically always-enabled and does not request persistent platform privileges. It writes/reads credentials to a user-scoped file (~/.openclaw/.env) which is expected for storing an API key; it does not modify other skills or system-wide settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install minimax-mcp-call
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /minimax-mcp-call 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
Slug minimax-mcp-call
版本 1.0.0
许可证
累计安装 5
当前安装数 5
历史版本数 1
常见问题

MiniMax MCP Call 是什么?

MiniMax MCP tools - Web search and image understanding via MiniMax Coding Plan. Use when user needs web search, current information, or image analysis. Requi... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 813 次。

如何安装 MiniMax MCP Call?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install minimax-mcp-call」即可一键安装,无需额外配置。

MiniMax MCP Call 是免费的吗?

是的,MiniMax MCP Call 完全免费(开源免费),可自由下载、安装和使用。

MiniMax MCP Call 支持哪些平台?

MiniMax MCP Call 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 MiniMax MCP Call?

由 russellfei(@russellfei)开发并维护,当前版本 v1.0.0。

💬 留言讨论