Skip to content
← Registry
Trust Report

minimax-mcp

MiniMax MCP server for web search and image understanding. Use when needing: (1) Web search via MiniMax API, (2) Analyze/describe images, (3) Extract content from URLs. Requires MINIMAX_API_KEY (China: api.minimaxi.com, Global: api.minimax.io).

77
CONDITIONAL
Format: openclawScanner: v0.7.0Duration: 35msScanned: 17d ago · Mar 22, 1:05 PMSource →
Embed this badge
AgentVerus CONDITIONAL 77AgentVerus CONDITIONAL 77AgentVerus CONDITIONAL 77
[![AgentVerus](https://agentverus.ai/api/v1/skill/5e1be08f-e32e-4ea7-ab3d-8f8d8ffb281e/badge)](https://agentverus.ai/skill/5e1be08f-e32e-4ea7-ab3d-8f8d8ffb281e)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/5e1be08f-e32e-4ea7-ab3d-8f8d8ffb281e/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"5e1be08f-e32e-4ea7-ab3d-8f8d8ffb281e","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/5e1be08f-e32e-4ea7-ab3d-8f8d8ffb281e/trust

Category Scores

60
Permissions
100
Injection
28
Dependencies
92
Behavioral
70
Content
100
Code Safety

Findings (10)

highCapability contract mismatch: inferred command execution is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: curl -LsSf https://astral.sh/uv/install.sh | sh

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred file read is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: references/

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://www.minimax.io/platform/user-center/basic-information/interface-key

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumCapability contract mismatch: inferred server exposure is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: MCP server

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred documentation ingestion is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: See [references/

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumDownload-and-execute pattern detected (inside code block)-8

The skill contains a download-and-execute pattern inside a code block. Verify the URL is trustworthy.

curl -LsSf https://astral.sh/uv/install.sh | sh

Pin the installer to a specific version or hash. Consider bundling dependencies instead.

dependenciesASST-04
mediumSuspicious install pattern: download and execute from remote URL-8

The skill instructs users to download and execute code from a remote URL, a common supply-chain attack vector.

curl -LsSf https://astral.sh/uv/install.sh | sh

Remove curl-pipe-to-shell patterns. Provide dependencies through safe, verifiable channels.

behavioralASST-02
mediumMany external URLs referenced (8)-8

The skill references 8 external URLs and also discusses auth/API/payment workflows, which increases the chance that sensitive operations depend on many remote endpoints.

URLs: https://www.minimax.io/platform/user-center/basic-information/interface-key, https://platform.minimaxi.com/user-center/basic-information/interface-key, https://api.minimaxi.com, https://api.minimax.io, https://astral.sh/uv/install.sh...

Minimize external dependencies to reduce supply chain risk.

dependenciesASST-04
mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk. Merged overlapping signals from the repeated finding family: - Unknown external reference

https://www.minimax.io/platform/user-center/basic-information/interface-key

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowNo explicit safety boundaries-10

The skill does not include explicit safety boundaries defining what it should NOT do.

No safety boundary patterns found

Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09