kie-byok-stuck
Warn
Audited by Socket on May 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's core goal is coherent with KIE BYOK diagnostics, and credentials flow to official KIE endpoints rather than a proxy, so this is not confirmed malware. But it directly extracts secrets, uses root SSH on production, and can execute an unpinned `npx tsx` workflow, making it a high-privilege operational skill with meaningful security risk.
Confidence: 89%Severity: 62%
Audit Metadata