mmx-cli
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill is the official command-line interface (mmx-cli) for the MiniMax AI Platform, developed by MiniMax-AI. The code implementation is professional and follows security best practices.- [COMMAND_EXECUTION]: The CLI uses local shell commands (such as open, start, or xdg-open) specifically to facilitate the OAuth authentication flow by opening the platform's login page in the user's default browser. This is a standard and expected behavior for CLI-based authentication.- [EXTERNAL_DOWNLOADS]: The skill downloads generated media content and fetches version metadata from official vendor domains (api.minimax.io, api.minimaxi.com) and the official GitHub repository (github.com/MiniMax-AI-Dev/minimax-cli). These sources are vendor-owned and trusted.- [DATA_EXFILTRATION]: The skill transmits user-provided files (such as images for vision tasks or documents for storage) to MiniMax's official API endpoints for processing. This data movement is the intended primary purpose of the tool and is performed via secure, authenticated requests to the vendor's infrastructure.
Audit Metadata