kimi-webbridge

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Purpose and capabilities are internally consistent for a browser-control skill, and the referenced installer appears to be from the official Kimi/Moonshot ecosystem rather than an unrelated third party. The main risk is not hidden malware but the very broad authority: arbitrary website actions and data access through the user's real authenticated browser sessions, plus local file writes and page-script execution. Overall: coherent but high-impact browser automation with medium-high security risk and low evidence of malicious intent.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 13, 2026, 05:08 PM
Package URL
pkg:socket/skills-sh/macaiagent1-cyber%2Fagent-skills%2Fkimi-webbridge%2F@36f94f6367e26bcdcd46cb8c02e66b03e52f55f552b8e178773c9b0c5331f444