minimax-h3-dynamic-comic-video

SUSPICIOUS. The skill’s overall behavior is mostly coherent with a media-generation integration, and the install path is relatively tame, but the unverified AI Hive credential conventions and the use of Hive as a third-party gateway for a MiniMax-branded capability create medium data-flow and trust concerns. No confirmed malware indicators or dangerous installer patterns are present in the provided skill text alone.

No malicious code behavior is demonstrated in this fragment because it contains only static configuration. However, it embeds a plaintext API key and an external service base URL, creating a significant credential-leak and unauthorized-access risk if used by surrounding code or if the secret is reused elsewhere. Additional context (how this config is loaded and how requests are made) is required to assess whether the external calls are legitimate and whether the key is scoped/rotated appropriately.