MiniMax MCP Search

Perform real-time web searches and analyze images using MiniMax MCP with input prompts and flexible image sources.

This skill appears to do what it says, but exercise caution before installing or running it: - mcporter install: The skill expects the 'mcporter' CLI (npm package). Only install mcporter if you trust its source; audit the npm package and its maintainers. - API key handling: SKILL.md mentions a MiniMax API key but the manifest doesn't declare any required env vars. Ask or verify where the API key is stored (mcporter config file?) and who/what can access it. - Local file exfiltration risk: The skill accepts arbitrary local file paths for image analysis and forwards them to an external service via mcporter. Do not point it at sensitive files. Consider restricting allowed image paths or running the skill in a sandboxed environment. - Command injection: search.py constructs shell commands by interpolating user input into mcporter calls and uses subprocess.run(..., shell=True). If untrusted input reaches these functions, an attacker could inject shell commands. Prefer sanitized arguments or using subprocess with an argv list (no shell), or otherwise validate and escape inputs. Recommended actions before use: review the mcporter package code and its network behavior; confirm where API keys/configs are stored; avoid using with sensitive local files; and request or patch the skill to avoid shell=True and to declare required credentials explicitly. If you are not comfortable auditing dependencies or running code from this author, treat the skill as untrusted.

Type: OpenClaw Skill Name: minimax-mcp-v2 Version: 1.0.0 The `search.py` script is highly vulnerable to shell injection. It uses `subprocess.run` with `shell=True` and directly interpolates user-controlled inputs (`query`, `prompt`, `image_path`) into the shell command strings without proper sanitization. This allows an attacker to execute arbitrary commands on the host system by crafting malicious input for the `web_search` and `understand_image` functions, posing a severe remote code execution risk.