kagi-session2api-mcp-server

SUSPICIOUS: the skill’s search/summarization behavior matches its stated purpose, but it asks users to bypass Kagi’s official API by providing full-account session tokens to a third-party PyPI package from a different publisher. No direct exfiltration endpoint or overt malware is shown, but the credential scope and third-party trust chain are disproportionate versus a normal API integration.