minimax-h3-seeding-video

SUSPICIOUS: the core behavior fits a video-generation skill, and the install path is relatively normal, but the skill routes credentials and media through an AI Hive intermediary that is not clearly verified against MiniMax's official direct API path. This makes the data flow and credential trust model weaker than a direct vendor integration, though there is no strong evidence of outright malware or hidden execution.

No malicious code behavior is demonstrated in this fragment because it contains only static configuration. However, it embeds a plaintext API key and an external service base URL, creating a significant credential-leak and unauthorized-access risk if used by surrounding code or if the secret is reused elsewhere. Additional context (how this config is loaded and how requests are made) is required to assess whether the external calls are legitimate and whether the key is scoped/rotated appropriately.