← 返回 Skills 市场
seacozz2007

minimax-tts-send

作者 Eric · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
297
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install minimax-tts-send
功能描述
调用 MiniMax 语音合成 API 生成语音,发送语音消息。支持系统音色、克隆音色、流式/非流式输出。使用场景:用户需要生成高质量中文语音、语音合成、文本转语音。
安全使用建议
Do not install or run this skill in a production environment until these issues are resolved. The package embeds a bearer API key in scripts/tts.py and uses an API domain that doesn't match the documented homepage — this could be a leaked/compromised key or a misconfigured/malicious endpoint. Ask the author to: (1) remove the hardcoded key and require the operator to provide their own API key via an environment variable (e.g., MINIMAX_API_KEY), (2) explain/confirm the correct API hostname and update SKILL.md to document it, and (3) rotate/revoke the embedded key if it is real. If you must test it, run in an isolated sandbox or VM with network monitoring, and avoid exposing any sensitive systems or credentials.
功能分析
Type: OpenClaw Skill Name: minimax-tts-send Version: 1.0.1 The skill contains a hardcoded API key in `scripts/tts.py` (sk-api-Tszh...), which is a significant security vulnerability and poor practice. While the script appears to function as described for MiniMax TTS services using the domain `api.minimaxi.com`, the inclusion of static credentials poses a risk of credential leakage or misuse, though no direct evidence of malicious intent against the user was identified.
能力评估
Purpose & Capability
Name/description match the included code (a TTS client). However the skill declares no required credentials/env vars while the script embeds a bearer API key directly in get_api_key(), which is inconsistent and not proportional to the stated purpose.
Instruction Scope
SKILL.md instructs running the included Python script and sending the generated audio; that is within scope. But the runtime instructions do not mention the embedded secret or the specific API endpoint used, so an operator would not expect the skill to ship a hardcoded credential or contact the non-obvious API host.
Install Mechanism
No install spec; the skill is instruction-only with a small Python script — minimal installation risk (nothing downloaded from arbitrary URLs).
Credentials
The skill requests no environment variables or credentials, yet the code contains a hardcoded bearer API key and uses API_BASE = "https://api.minimaxi.com" (note domain differs from the published homepage minimax.io). Hardcoded secrets and a domain mismatch are disproportionate and problematic.
Persistence & Privilege
always is false and the skill does not request elevated or persistent platform privileges or modify other skills' configs.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install minimax-tts-send
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /minimax-tts-send 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Updated SKILL.md to anonymize example target ID in the Telegram sending command from a specific number to "xxxxxxx". - No code or functionality changes.
v1.0.0
- Initial release introducing MiniMax TTS skill. - Supports generating and sending speech via MiniMax TTS API. - Allows selection of system and cloned voices, and choice of streaming/non-streaming output. - Provides command-line tools for text-to-speech conversion and voice message sending. - Lists common system voices; supports listing all available voices with a command. - Includes detailed usage instructions and parameter options.
元数据
Slug minimax-tts-send
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

minimax-tts-send 是什么?

调用 MiniMax 语音合成 API 生成语音,发送语音消息。支持系统音色、克隆音色、流式/非流式输出。使用场景:用户需要生成高质量中文语音、语音合成、文本转语音。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 297 次。

如何安装 minimax-tts-send?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install minimax-tts-send」即可一键安装,无需额外配置。

minimax-tts-send 是免费的吗?

是的,minimax-tts-send 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

minimax-tts-send 支持哪些平台?

minimax-tts-send 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 minimax-tts-send?

由 Eric(@seacozz2007)开发并维护,当前版本 v1.0.1。

💬 留言讨论