minimax

Warn

Audited by Socket on Oct 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core API usage is internally consistent with a Pixazo-published gateway skill, but the branding can mislead because credentials and content go to Pixazo rather than MiniMax directly. Main concerns are third-party gateway routing, local raw key persistence, and the unrelated wildcard transitive skill-install suggestion; there is no strong evidence of outright malware.

Confidence: 91%Severity: 56%
Audit Metadata
Analyzed At
Oct 25, 2026, 11:44 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fminimax%2F@52a523aabac37eb6a533ccd2afa860ba3dcd52680f5473d6b09b0f22257799b8