minimax-delegation
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install the official
mmx-clipackage via npm from a well-known service provider (MiniMax). - [COMMAND_EXECUTION]: The skill utilizes shell commands to interact with the
mmxbinary for authentication checks and text generation. It also executes a local Python script to manage delegation workflows. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data by reading local source files and inlining their content into LLM prompts for analysis.
- Ingestion points: Local file content read via
delegation_executor.pyor shell command substitution. - Boundary markers: No explicit delimiters or safety instructions are defined in the command examples to isolate file content from the system prompt.
- Capability inventory: The skill executes shell commands via the CLI and writes output to the local filesystem.
- Sanitization: No explicit sanitization or filtering of file contents is mentioned before they are passed as context.
Audit Metadata