minimax-speech
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill correctly uses environment variables (
MINIMAX_API_KEY) to manage API credentials, preventing hardcoded secrets. - [SAFE]: Network activity is restricted to the official MiniMax API domain (
api.minimaxi.com) for the purpose of generating speech and querying available voices. - [SAFE]: File system access is scoped to reading input text files (via user-provided paths) and writing the generated audio output (
.mp3) and subtitles (.json,.srt). - [SAFE]: No obfuscation, malicious prompt injection, or remote code execution patterns were found in the TypeScript scripts or the skill's documentation.
- [SAFE]: The custom TAR extraction logic in
scripts/tts.tsis implemented in pure TypeScript to handle API responses without relying on external system binaries.
Audit Metadata