The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes multiple local Python scripts using the uv tool to perform administrative tasks.
Evidence includes calls to scripts/kimi-audit.py to compare local and remote skill lists and scripts/kimi-extract.py to handle archive extraction.
It also performs git operations, including git add and git commit, to persist changes to the repository.
[EXTERNAL_DOWNLOADS]: The skill fetches data and files from external sources, specifically kimi.com.
It downloads signed ZIP archives containing skill definitions and content using curl or Python-based methods.
The instructions include a specific security check to reject archive entries that are absolute or contain path traversal characters (..).
[DYNAMIC_EXECUTION]: The skill injects and executes JavaScript directly into the browser context to interact with the Kimi web application.
It uses browser_cdp with Runtime.evaluate or browser_evaluate to run code from scripts/kimi-list.js and scripts/kimi-download.js.
This execution is used to scrape internal application state, such as the VUE_QUERY_CLIENT cache and Vue provider objects, to retrieve skill metadata and download URLs.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a significant attack surface for indirect prompt injection due to its core function of ingesting third-party skill data.
Ingestion points: Data enters the environment from kimi.com via scraped skill lists, file tree metadata, and the content of downloaded ZIP files (SKILL.md).
Boundary markers: The skill implements path-based boundary checks (preventing ZIP slip) but lacks delimiters or warnings to the agent regarding the interpretation of natural language instructions found within the downloaded files.
Capability inventory: The skill has capabilities including file system writes (kimi-extract.py), browser manipulation, and repository modification (git commit).
Sanitization: While path validation is present for the extraction process, there is no evidence of content sanitization for the instructions embedded in the downloaded skill files.

kimi-sync