kimi-use
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: mostly coherent with its stated purpose of driving the official Kimi desktop client, but the scope expands materially into general macOS desktop automation and can act through a logged-in user session with potential paid/plugin-backed actions. No clear malware or credential-harvesting behavior is shown, yet the broad UI-control capability and account-mediated data access make it medium risk.
Confidence: 83%Severity: 54%
Audit Metadata