kimi-use

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: mostly coherent with its stated purpose of driving the official Kimi desktop client, but the scope expands materially into general macOS desktop automation and can act through a logged-in user session with potential paid/plugin-backed actions. No clear malware or credential-harvesting behavior is shown, yet the broad UI-control capability and account-mediated data access make it medium risk.

Confidence: 83%Severity: 54%
Audit Metadata
Analyzed At
Oct 8, 2026, 03:07 AM
Package URL
pkg:socket/skills-sh/daymade%2Fclaude-code-skills%2Fkimi-use%2F@4245050ee838f23b4209111966a977c4817348f0a6843fa5c54f6527b0b68c70