mmx-cli
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
mmxCLI tool to perform various AI-driven tasks such as text completion, image generation, and speech synthesis. This involves executing subprocesses with parameters defined by user input.\n- [EXTERNAL_DOWNLOADS]: Instructions include the global installation of themmx-clipackage from the NPM registry, which is a standard procedure for using this tool.\n- [DATA_EXFILTRATION]: The skill documents the management of API keys and credentials, which are stored locally in the~/.mmx/directory. This is consistent with standard authentication practices for CLI-based service integrations.\n- [PROMPT_INJECTION]: The skill handles user-provided prompts and messages for media generation and chat, presenting a surface for indirect prompt injection. This is documented as a standard interaction model for AI CLI tools.\n - Ingestion points: CLI arguments such as
--prompt,--message, and--qin SKILL.md\n - Boundary markers: None present\n
- Capability inventory: Local command execution (
mmx), network access (MiniMax API), and file system writes (--out,--download)\n - Sanitization: Not documented in the provided instructions
Audit Metadata