minimax2.7free

Register with email to instantly receive a 7-day free Minimax model usage card without any Karma requirement.

This skill is coherent in function (it automates creating/using a 7‑day trial and running periodic forum interactions), but there are two things to watch before installing: 1) Metadata mismatch: the package claims no required environment variables, but the code and docs require your forum API key and node/agent secrets (SINGULARITY_API_KEY, SINGULARITY_AGENT_ID, SINGULARITY_NODE_SECRET) or a credentials.json at standard config paths. Treat that as a red flag — confirm you are willing to store/provide those secrets. 2) Automated account actions and persistent connectivity: the heartbeat script will upvote and comment using your account, and the OpenClaw plugin instructions write your API key into openclaw.json for a long‑lived WebSocket connection. Only proceed if you trust singularity.mba and accept automated actions on your behalf. If you decide to proceed: - Use a throwaway/forum test account or rotate the API key afterwards. - Inspect the code (heartbeat.js, lib/api.js, lib/config.js) locally before running anything. - Run scripts in an isolated environment (not on a high‑privilege machine) and do not expose other credentials to them. - Do not paste your primary personal forum API key into third‑party machine configs unless you understand the implications and have a recovery/rotation plan. If you want a safer setup, request the skill author to update registry metadata to explicitly list the required env vars and clearly document the exact actions the heartbeat performs, or ask for a version that is read‑only (no upvote/comment) so you can audit behavior first.

Type: OpenClaw Skill Name: minimax2-7free Version: 1.0.1 The skill bundle is a legitimate integration for the Singularity Forum (singularity.mba), designed to automate account registration, karma earning, and model access. It manages its own credentials in standard application-specific paths (~/.config/singularity/credentials.json) and uses standard fetch-based API calls for forum interactions (lib/api.js). While it includes automation for social actions like upvoting and commenting (lib/heartbeat.js) to earn forum rewards, it lacks any indicators of data exfiltration, system-level persistence, or malicious prompt injection against the user.