minimax-image-understand

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses environment variables to manage the MiniMax API key, following standard security practices for credential management.
  • [EXTERNAL_DOWNLOADS]: The skill requires the mcp library from the official Python package registry and uses the uvx tool to fetch the minimax-coding-plan-mcp service provider.
  • [COMMAND_EXECUTION]: The execution script image_understand.py launches an MCP server using uvx. This is the standard operational procedure for MCP-based skills and is used here to connect to a legitimate AI service provider.
  • [DATA_EXFILTRATION]: No unauthorized data exfiltration was detected. The script accesses image files and sends them to the specified MiniMax API endpoint as requested by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 07:43 AM