📄 MiniMax PDF Analysis V2 — MiniMax工具
v1.0.0[AI辅助] Analyze PDF files using MiniMax API. Supports text extraction, keyword search, and image-based VLM analysis (converts PDF pages to images first). Requires Mi...
0· 317·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill mostly matches its stated purpose (PDF text/search and image-based VLM analysis) but includes extra undocumented network-capable tooling and will upload local file contents to a remote API — exercise caution before installing or using with sensitive files or a privileged API key.
评估建议
This skill appears to implement the advertised PDF extraction/search and image-VLM flows, but it also includes a Node CLI tool that can: (1) perform web searches via the Coding Plan API, and (2) read local image files (or any file path you pass) and upload them as base64 to api.minimax.io. Before installing or using: - Do not provide your primary/privileged API key unless you trust api.minimax.io; consider a restricted or throwaway key for testing. - Avoid running the vision/web_search tools on ...详细分析 ▾
ℹ 用途与能力
Name/description (PDF extraction, search, VLM) align with the included Python scripts. Required binaries (python, node) and MINIMAX_API_KEY are reasonable for the VLM feature. However, the bundled Node tool exposes an additional 'web_search' capability and a generic 'understand_image' CLI that can POST arbitrary images or local files to api.minimax.io — this web-search functionality is not documented in SKILL.md and expands the skill's surface beyond the stated PDF-focused purpose. README also references a different domain (platform.minimaxi.com) which is inconsistent with api.minimax.io.
⚠ 指令范围
SKILL.md instructs running the Python scripts and setting MINIMAX_API_KEY, which is expected. But the codebase contains a Node tool that can perform web searches and convert arbitrary local files to base64 and send them to the MiniMax API. The SKILL.md does not warn that running the Node tool or some modes will upload local file contents (including arbitrary file paths) to a remote service; that could result in inadvertent leakage of sensitive local data if a user or agent invokes those tools.
✓ 安装机制
No remote install/downloads or archive extraction are specified; the skill is instruction+source-only. No external installers are executed by the manifest. That lowers supply-chain risk compared with arbitrary downloads.
ℹ 凭证需求
Only MINIMAX_API_KEY is required, which is proportional to calling MiniMax APIs. Be aware that the provided API key will be sent to api.minimax.io when using VLM or web_search; any content you send (images, prompts, extracted text) will be transmitted to that service. The README/SKILL.md request a 'Coding Plan' key (sk-cp-*) which is consistent with the code, but domain references are inconsistent which merits verification.
✓ 持久化与权限
The skill does not request always:true, does not alter other skills or system-wide config, and is user-invocable by default. It does not request persistent elevated privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/24
Initial release: PDF to images + MiniMax VLM analysis
● 无害
安装命令 点击复制
官方npx clawhub@latest install minimax-pdf-analysis-v2
镜像加速npx clawhub@latest install minimax-pdf-analysis-v2 --registry https://cn.clawhub-mirror.com
技能文档
使用 MiniMax API 分析 PDF，支援三種模式。
三種分析模式
1. 萃取文字 extract
python scripts/analyze_pdf.py extract input.pdf
python scripts/analyze_pdf.py extract input.pdf --output out.txt
python scripts/analyze_pdf.py extract input.pdf --pages 1-3
2. 搜尋關鍵字 搜索
python scripts/analyze_pdf.py search input.pdf "PID"
python scripts/analyze_pdf.py search input.pdf "error" --ignore-case
python scripts/analyze_pdf.py search input.pdf "regex.*pattern" --regex
3. VLM 圖片分析 vision
# 需要 MINIMAX_API_KEY 環境變數
export MINIMAX_API_KEY=sk-cp-xxx# 分析整份 PDF（每頁轉圖片後分析）
python scripts/analyze_pdf.py vision input.pdf "摘要這張投影片的內容"
# 只分析特定頁面
python scripts/analyze_pdf.py vision input.pdf "摘要" --pages 1-3 --dpi 200
環境需求
| 套件 | 安裝方式 |
|---|---|
| PyMuPDF | pip install pymupdf |
| MiniMax API Key | MINIMAX_API_KEY=sk-cp-xxx |
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制