minimax-tts

Warn

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: MEDIUMDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DATA_EXFILTRATION]: The script reads from multiple sensitive local file paths including ~/.env, ~/.vk-cowork/.env, and .env in the current working directory to retrieve API credentials. Accessing generic files like ~/.env is a security risk as these files frequently contain unrelated secrets or sensitive environment variables.
  • [COMMAND_EXECUTION]: The script uses subprocess.run to execute system commands like afplay on macOS or mpg123 on Linux to play generated audio. This allows for local command execution based on file paths.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to the external endpoint api.minimaxi.com to send text data and download audio content.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 16, 2026, 02:27 AM