← 返回 Skills 市场
5695
总下载
2
收藏
60
当前安装
5
版本数
在 OpenClaw 中安装
/install minimax-web-search
功能描述
使用 MiniMax MCP 进行网络搜索。触发条件：(1) 用户要求进行网络搜索、在线搜索、查找信息 (2) 需要查询最新资讯、新闻、资料 (3) 使用 MiniMax 的 web_search 功能
安全使用建议
Review before installing. Use a dedicated MiniMax API key with limited billing exposure, avoid running the documented key-check command unless it is changed to mask the key, and prefer setting the key through a secure secret mechanism instead of plaintext config. Verify the uv installer and minimax-coding-plan-mcp package source, and avoid placing private data in search queries.
功能分析
Type: OpenClaw Skill
Name: minimax-web-search
Version: 1.0.7
The skill is classified as suspicious due to two main vulnerabilities. First, the `SKILL.md` instructs the agent to install `uv` using `curl -LsSf https://astral.sh/uv/install.sh | sh`, which is a high-risk practice vulnerable to supply chain attacks if the remote script or its source is compromised. Second, the `SKILL.md` also presents a shell injection vulnerability where the user-provided `<搜索查询>` is directly inserted into a shell command (`python3 {curDir}/scripts/web_search.py "<搜索查询>"`) without explicit sanitization, potentially allowing an attacker to execute arbitrary commands if the OpenClaw agent does not sanitize input. The `scripts/web_search.py` itself appears to handle the query safely once received as an argument, passing it as a JSON string to the `minimax-coding-plan-mcp` tool, and communicates with the legitimate `https://api.minimaxi.com` endpoint.
能力评估
Purpose & Capability
The stated purpose is MiniMax-backed web search, and the script calls the MiniMax MCP web_search tool against api.minimaxi.com. Sending search queries and a MiniMax API key to that integration is purpose-aligned, but it is still an external-provider data flow.
Instruction Scope
The setup instructions check configuration by printing the stored api_key value to stdout, which can expose the secret in terminal output, logs, or agent context. The broad trigger for routine web-search requests also makes this credential-handling flow more likely to run without the user explicitly choosing this provider.
Install Mechanism
The skill instructs installation of uv via a remote shell script and installs minimax-coding-plan-mcp without a pinned version. This is disclosed and related to the integration, but it relies on external code outside the reviewed artifacts.
Credentials
The script loads a MiniMax API key from MINIMAX_API_KEY or ~/.openclaw/config/minimax.json, then launches uvx minimax-coding-plan-mcp with the full inherited environment plus MiniMax variables. Using the key is expected, but passing the whole environment to an external subprocess is broader than necessary.
Persistence & Privilege
The skill tells the agent to save the MiniMax API key in plaintext under ~/.openclaw/config/minimax.json and use ~/.openclaw/workspace/minimax-output for output. There is no background persistence or privilege escalation, but long-term plaintext credential storage is under-disclosed for a search skill.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install minimax-web-search - 安装完成后，直接呼叫该 Skill 的名称或使用
/minimax-web-search触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.7
- 简化并缩短了 API Key 配置流程说明，移除代理配置自动提取部分。
- 删除了执行流程的完整示例对话，突出直接操作步骤。
- 文档说明由“首次需要安装，后续直接调用”优化为“首次需要安装，后续直接步骤4调用”。
- 其它内容及脚本调用说明未变，功能保持一致。
v1.0.6
- 简化并缩短了 API Key 配置流程说明，移除代理配置自动提取部分。
- 删除了执行流程的完整示例对话，突出直接操作步骤。
- 文档说明由“首次需要安装，后续直接调用”优化为“首次需要安装，后续直接步骤4调用”。
- 其它内容及脚本调用说明未变，功能保持一致。
v1.0.2
- 简化了初次安装流程说明，后续可直接从步骤4调用。
- API Key 的本地自动查找策略调整为：优先从 `~/.openclaw/agents/main/agent/auth-profiles.json` 中搜索Key。
- 精简和优化了执行流程示例，去除冗余演示步骤。
- 移除以前明确要求 API Key 以 `sk-cp-` 开头的格式判断。
- 文档结构略有调整，流程简介性提升。
v1.0.1
Version 1.0.1
- Added _meta.json metadata file.
- Updated documentation in SKILL.md: clarified dependency check/installation steps, API Key detection priority, and expanded API Key acquisition instructions.
- Script path references updated from hardcoded to {curDir} variable for flexibility.
- API Key is now read with preference for the MINIMAX_API_KEY environment variable before config file.
- Purchase link for MiniMax coding plan added where Key is not available.
v1.0.0
- Initial release of minimax-web-search: enables web search via MiniMax MCP server.
- Provides detailed setup instructions for dependencies and MCP server installation.
- Guides users through API Key detection, acquisition, and configuration.
- Includes usage instructions for performing live web searches using a provided Python script.
- Covers error handling for missing dependencies or misconfiguration.
元数据
常见问题
minimax-web-search 是什么？
使用 MiniMax MCP 进行网络搜索。触发条件：(1) 用户要求进行网络搜索、在线搜索、查找信息 (2) 需要查询最新资讯、新闻、资料 (3) 使用 MiniMax 的 web_search 功能. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 5695 次。
如何安装 minimax-web-search？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install minimax-web-search」即可一键安装，无需额外配置。
minimax-web-search 是免费的吗？
是的，minimax-web-search 完全免费（开源免费），可自由下载、安装和使用。
minimax-web-search 支持哪些平台？
minimax-web-search 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 minimax-web-search？
由 要啥自行车（@thincher）开发并维护，当前版本 v1.0.7。
推荐 Skills