frontend-dev

Warn

Audited by Gen Agent Trust Hub on Apr 15, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides environment setup instructions in references/env-setup.md that involve using sudo to install the ffmpeg dependency (sudo apt install ffmpeg). This requests the agent to perform operations with elevated system privileges.
  • [EXTERNAL_DOWNLOADS]: The skill includes several Python scripts (minimax_image.py, minimax_music.py, minimax_tts.py, minimax_video.py) designed to fetch and download media files (images, MP4 videos, and MP3 audio) from remote API servers to the local project directory.
  • [DATA_EXFILTRATION]: Legitimate API interaction scripts transmit the MINIMAX_API_KEY to a destination defined by the MINIMAX_API_BASE environment variable. While this is a common architectural pattern for API-based tools, it involves sending sensitive credentials over the network to a destination that must be verified by the user.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 15, 2026, 09:36 AM