by 安全扫描
OpenClaw
安全
high confidenceThe skill is internally consistent with its stated purpose (calling the MiniMax image-generation API) and only requests the MiniMax API key; there are no unexpected endpoints, installs, or broad credential demands.
评估建议
This skill appears to do what it claims: a simple Python client for MiniMax image generation that needs your MiniMax API key. Before installing: (1) Confirm you trust the MiniMax endpoint (api.minimaxi.com) and that your API key is a scoped key (not a broadly privileged secret). (2) Be aware returned image URLs expire (SKILL.md says 24 hours). (3) The repository source is 'unknown' and has no homepage—if you require provenance, request a published source or vendor link. (4) Install only within a...详细分析 ▾
✓ 用途与能力
Name/description, SKILL.md, _meta.json, and the script all describe and implement an image-generation client for MiniMax using the same API host (api.minimaxi.com) and the expected MINIMAX_API_KEY. The required functionality (text->image and image->image) is implemented and matches the documented models and options.
✓ 指令范围
Runtime instructions only direct the agent/user to set MINIMAX_API_KEY, invoke the provided Python script, and call the documented API endpoint. The SKILL.md and script do not attempt to read unrelated files, other environment variables, or send data to third-party endpoints beyond the stated MiniMax API.
ℹ 安装机制
There is no install spec (instruction-only + a bundled script). requirements.txt only lists 'requests'. _meta.json lists python3 and curl, but the bundled script uses Python 'requests' (curl is not used). This mismatch is minor but worth noting; there are no downloads from untrusted URLs or extraction of archives.
✓ 凭证需求
The only credential required is MINIMAX_API_KEY (declared as primaryEnv). No other tokens, secrets, or unrelated credentials are requested. This is proportionate for a hosted image-generation API client.
✓ 持久化与权限
always is false and the skill does not request system-wide persistence or modification of other skills. It is user-invocable and uses the normal autonomous-invocation default; nothing else grants elevated or permanent privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/15
Initial release of MiniMax Image Generation: - Supports image generation using MiniMax's image-01 and image-01-live models via Coding Plan API. - Enables both text-to-image and image-to-image generation with multiple aspect ratios. - Provides optional style settings for image-01-live, including cartoon, watercolor, and more. - Offers a command-line interface with various configurable parameters (model, aspect ratio, output format, etc.). - Requires a MiniMax API Key; supports batch generation and output in URL or base64 format. - Includes examples and detailed parameter documentation.
● 无害
安装命令 点击复制
官方npx clawhub@latest install minimax-image-generation
镜像加速npx clawhub@latest install minimax-image-generation --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制