minimax-music-gen
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill integrates with the MiniMax API using standard Python libraries and follows proper security practices, such as warning the agent against printing API keys to the console.
- [COMMAND_EXECUTION]: The skill uses Python's
subprocessmodule and shell scripts to launch media players (mpv,ffplay,open) and query file metadata viaffprobe. These actions are necessary for the skill's primary function of generating and playing audio tracks. - [EXTERNAL_DOWNLOADS]: The skill downloads generated audio content from the MiniMax API endpoints (
api.minimax.ioorapi.minimaxi.com) to the local filesystem. These domains are vendor-owned and part of the intended functionality. - [DATA_EXPOSURE]: The skill accesses standard environment variables and local configuration files (
~/.minimax_api_key) to manage credentials, which is consistent with typical CLI and agent skill development patterns.
Audit Metadata