minimax-tts
Warn
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The script reads from multiple sensitive local file paths including
~/.env,~/.vk-cowork/.env, and.envin the current working directory to retrieve API credentials. Accessing generic files like~/.envis a security risk as these files frequently contain unrelated secrets or sensitive environment variables. - [COMMAND_EXECUTION]: The script uses
subprocess.runto execute system commands likeafplayon macOS ormpg123on Linux to play generated audio. This allows for local command execution based on file paths. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to the external endpoint
api.minimaxi.comto send text data and download audio content.
Audit Metadata