minimax-web-search

SUSPICIOUS: The skill’s purpose and core capability are aligned with MiniMax web search, and its network flow appears to target the official MiniMax service. However, it uses curl|sh for uv installation, reads raw API keys from local files, and forwards credentials to a PyPI-hosted MCP package whose provenance is only partially verifiable, making the overall skill medium risk rather than benign.