kimi-agent-swarm-cli
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local research harness using
bun run src/cli.tsfound in theruntime/wide-searchdirectory of the repository. - [EXTERNAL_DOWNLOADS]: Uses built-in
WebSearchandFetchURLtools to gather research data from various external websites. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface due to its processing of untrusted web content.
- Ingestion points: Data is ingested via the
WebSearchandFetchURLtools (as described inreferences/wide-search-mode.md). - Boundary markers: Subagents use a
prompt_templatewith{{item}}delimiters, but lack explicit instructions to disregard instructions within the ingested data. - Capability inventory: The skill uses high-privilege tools including
AgentSwarm,WebSearch,FetchURL,Read,Write, andBash(documented inSKILL.md). - Sanitization: Employs source quality rules (Relevance, Authority, Freshness) and verification checks (identifying unsupported or conflicting claims) to help sanitize research results.
Audit Metadata