kimi-webbridge
Warn
Audited by Socket on Jun 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
Purpose and capabilities are internally consistent for a browser-control skill, and the referenced installer appears to be from the official Kimi/Moonshot ecosystem rather than an unrelated third party. The main risk is not hidden malware but the very broad authority: arbitrary website actions and data access through the user's real authenticated browser sessions, plus local file writes and page-script execution. Overall: coherent but high-impact browser automation with medium-high security risk and low evidence of malicious intent.
Confidence: 100%Severity: 60%
Audit Metadata