minimax-understand-image
Fail
Audited by Snyk on Sep 16, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The skill instructs the agent to ask the user for an API key and then embed it verbatim into a JSON configuration file via a generated command, which exposes the secret value in the LLM's context and output.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The skill instructs downloading and executing an installation script from
astral.shto installuvduring setup, which represents an unverified remote runtime dependency.
Issues (2)
W007
HIGHInsecure credential handling detected in skill instructions.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata