kimi-webbridge

Official same-org browser automation skill with coherent purpose and no clear credential-harvesting endpoint, but it is intrinsically high-risk because it grants an AI broad control over the user's authenticated browser, file upload/write capability, and low-level CDP/network access. Not confirmed malware; security risk is high due to power and scope.