minimax-video

Original source / Raw SKILL.md

---
name: minimax-video
description: Use Zhipu (智谱) web search API for searching the internet. Use when user asks for web search, latest news, or needs current information.
allowed-tools: Bash(curl:*) Bash(jq:*)
env:
  - MINIMAX_API_KEY
---

# Zhipu Web Search

Use Zhipu's web search API to search the internet.

## ⚠️ Security Requirements

**This skill requires `MINIMAX_API_KEY` environment variable to be set before use.**

### Security Best Practices:

1. **DO NOT store API keys in ~/.bashrc** - keys can be leaked
2. **DO NOT source shell configuration files** - prevents arbitrary code execution  
3. **Set environment variable directly** when running the script
4. **Be aware** API key will be visible in process list (ps aux)

## Setup

```bash
# Set API key as environment variable
export MINIMAX_API_KEY="your_api_key"
```

**Get your API key from:** https://www.bigmodel.cn/usercenter/proj-mgmt/apikeys

## Usage

### Quick Search

```bash
export MINIMAX_API_KEY="your_key"

curl -s -X POST "https://open.bigmodel.cn/api/paas/v4/chat/completions" \
  -H "Authorization: Bearer $MINIMAX_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "glm-4-flash",
    "messages": [{"role": "user", "content": "搜索: YOUR_QUERY"}],
    "tools": [{"type": "web_search", "web_search": {"search_query": "YOUR_QUERY"}}]
  }' | jq -r '.choices[0].message.content'
```

### Using the Script

```bash
export MINIMAX_API_KEY="your_key"
./search.sh "搜索内容"
```

## Security Analysis

### ✅ What's Safe:
- No sourcing of ~/.bashrc or shell config files
- Uses jq for JSON escaping (prevents injection)
- Uses HTTPS with TLS 1.2+
- API key via environment variable (not hardcoded)
- Proper error handling - sensitive info not leaked
- Input validation (query length limit)
- Generic error messages (no path/file hints)

### ⚠️ Considerations:
- **Process list visibility**: API key visible in `ps aux`
  - Use in trusted environments only
- **Endpoint**: `https://open.bigmodel.cn` (official Zhipu API)

## Safety Features

| Feature | Implementation |
|---------|----------------|
| JSON escaping | jq --arg prevents injection |
| Input validation | Query length ≤500 chars |
| TLS | Force TLS 1.2+ |
| Error handling | Generic messages, no leaks |
| Timeout | 30 second curl timeout |

## When to Use

- User says "search for", "look up", "find information about"
- User asks "what's the latest news about"
- User needs current information from the web

## API Endpoint

**Official:** `https://open.bigmodel.cn/api/paas/v4/chat/completions`


---

## Skill Companion Files

> Additional files collected from the skill directory layout.

### _meta.json

```json
{
  "owner": "honestqiao",
  "slug": "minimax-video",
  "displayName": "Minimax Video",
  "latest": {
    "version": "1.0.0",
    "publishedAt": 1771694709987,
    "commit": "https://github.com/openclaw/skills/commit/7a5fbb4f7eab2c336d4cf503e4b84c6c0432dbc7"
  },
  "history": []
}

```