minimax
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches model documentation and reference schemas from the vendor's website (
https://www.pixazo.ai/models/minimax.md). This is a legitimate documentation request from the skill author's official domain. - [DATA_EXFILTRATION]: The skill transmits user-provided prompts and metadata to the vendor's API gateway (
https://gateway.pixazo.ai) to perform its primary function of media generation. This behavior is expected for an API-integrated skill. - [COMMAND_EXECUTION]: The instructions include
chmod 600for securing the local API key file stored in~/.pixazo/api-key. This is a security best practice for managing file permissions on sensitive credentials. - [CREDENTIALS_UNSAFE]: The skill provides instructions for managing a
PIXAZO_API_KEY. It correctly guides the user to use environment variables or a secure local file with restricted permissions rather than hardcoding secrets.
Audit Metadata