frontend-dev
Warn
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides environment setup instructions in
references/env-setup.mdthat involve usingsudoto install theffmpegdependency (sudo apt install ffmpeg). This requests the agent to perform operations with elevated system privileges. - [EXTERNAL_DOWNLOADS]: The skill includes several Python scripts (
minimax_image.py,minimax_music.py,minimax_tts.py,minimax_video.py) designed to fetch and download media files (images, MP4 videos, and MP3 audio) from remote API servers to the local project directory. - [DATA_EXFILTRATION]: Legitimate API interaction scripts transmit the
MINIMAX_API_KEYto a destination defined by theMINIMAX_API_BASEenvironment variable. While this is a common architectural pattern for API-based tools, it involves sending sensitive credentials over the network to a destination that must be verified by the user.
Audit Metadata