kimi-webbridge

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The set includes a direct download of an install.sh from cdn.kimi.com and instructions to fetch-and-pipe that shell to bash plus control a local daemon at 127.0.0.1:10086 — a high-risk pattern (remote executable/script delivery and automatic execution, plus local-control endpoints) if the domain or script are not fully trusted or could be compromised.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The skill grants a local daemon full control of the user's real browser (including logged-in sessions), arbitrary in-page JS execution, network capture, file reads/writes, and recommends running a remote install script—capabilities that enable clear credential theft, data exfiltration, remote code execution and supply-chain abuse if misused.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The operations instructions explicitly tell operators to run a remote install script that is fetched and executed (curl -fsSL https://cdn.kimi.com/webbridge/install.sh | bash), which downloads and runs remote code as a required setup step for the skill.