← 返回 Skills 市场
77
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install minimax-music-ai
功能描述
MiniMax AI 音乐生成技能。使用 MiniMax API 生成歌词、合成歌曲、批量生成样本曲目、支持纯音乐和人声歌曲。可用风格：古风、摇滚、流行、钢琴、催眠等。当用户要求"生成音乐"、"写首歌"、"生成歌词"、"合成歌曲"、"批量生成BGM样本"时触发。
安全使用建议
Do not install or run this skill until the API key issue is resolved. Specifically: (1) Ask the publisher why a cleartext API key is embedded and for proof that it is safe to use; (2) insist the script be changed to require the user to provide their own API key (via env var or prompt) rather than using a baked-in key; (3) if you already ran it, consider the embedded key compromised — rotate/disable it (if it's yours) and monitor for unauthorized use; (4) verify the MiniMax API domain and the publisher's reputation before providing your own credentials; (5) if you need the skill, prefer a version that documents required environment variables (e.g., MINIMAX_API_KEY) and does not contain secrets in code.
功能分析
Type: OpenClaw Skill
Name: minimax-music-ai
Version: 1.0.0
The skill bundle contains a hardcoded MiniMax API key in 'scripts/generate.py', which is a significant credential exposure vulnerability. The script also utilizes 'subprocess.run' to execute 'ffmpeg' with the '-safe 0' flag for audio merging; while this is functional for the stated purpose, it represents a high-risk capability that could be exploited if input filenames are not strictly controlled. No evidence of intentional malicious behavior or data exfiltration was found.
能力标签
能力评估
Purpose & Capability
Name, description, SKILL.md, README and scripts all describe a music/lyrics generation integration with api.minimaxi.com; the required network, ffmpeg usage, and file reads/writes are appropriate for that purpose. However, the skill manifest declares no required environment variables while both SKILL.md and the code expect an API key, which is inconsistent.
Instruction Scope
Runtime instructions focus on calling the MiniMax API, downloading audio, saving files, and optionally calling ffmpeg to merge tracks — all within the stated scope. The SKILL.md does not instruct the agent to read unrelated system files or contact unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only skill) and no downloaded/embedded installers. The included Python script is run by the user; nothing in the package writes additional binaries or fetches code at install time.
Credentials
The script requires an API key to call the MiniMax API, but the registry metadata lists no required env vars or primary credential. Worse, scripts/generate.py contains a hard-coded API_KEY constant (a value matching the Token Plan key pattern). Embedding a cleartext key is a security risk (unauthorized use, quota drain, secret leakage) and the manifest's omission of required credentials is incoherent.
Persistence & Privilege
Skill is not marked always:true and has no special OS restrictions or privileged install behavior. It does write files and calls ffmpeg at runtime (expected for media generation) but does not attempt to modify other skills or system-wide agent settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install minimax-music-ai - 安装完成后，直接呼叫该 Skill 的名称或使用
/minimax-music-ai触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
首次发布：支持歌词生成、歌曲合成、批量生成、FFmpeg合并
元数据
常见问题
MiniMax AI音乐生成 是什么？
MiniMax AI 音乐生成技能。使用 MiniMax API 生成歌词、合成歌曲、批量生成样本曲目、支持纯音乐和人声歌曲。可用风格：古风、摇滚、流行、钢琴、催眠等。当用户要求"生成音乐"、"写首歌"、"生成歌词"、"合成歌曲"、"批量生成BGM样本"时触发。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 77 次。
如何安装 MiniMax AI音乐生成？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install minimax-music-ai」即可一键安装，无需额外配置。
MiniMax AI音乐生成 是免费的吗？
是的，MiniMax AI音乐生成 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
MiniMax AI音乐生成 支持哪些平台？
MiniMax AI音乐生成 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 MiniMax AI音乐生成？
由 838997125（@838997125）开发并维护，当前版本 v1.0.0。
推荐 Skills