Skills/ClawHub/space-duck-kimi-relay

space-duck-kimi-relay@0.10.0

CAUTION

Publisher claims: "Optional Lane A / BYOB add-on for Space Duck — runs a local RFC 8628 device-code "Sign in with Kimi" flow (no password; browser-approved) so a self-hosted duck can use the owner's flat-rate Kimi membership for inference. Credentials (access + rotating refresh token) are stored locally at ~/.kimi-code/credentials/kimi.json (0600) and are NEVER sent to Spaceduckling. Contacts only auth.kimi.com and api.kimi.com; inference is processed by Moonshot AI in China (no Western data residency). Optional pay-per-token fallback to openrouter.ai when OPENROUTER_API_KEY is set (daily-capped). Runs a localhost-only proxy (127.0.0.1, default 8471) protected by an auto-generated 0600 bearer secret. Hosted (Lane B) ducks use the Mission Control card instead. Triggers on "sign in with kimi", "kimi membership login", "clawhub space-duck kimi", "kimi relay login"." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher askegor · joined 1 days agoInstalls 1,738Last detonated 27 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsSECURITY-MANIFEST.md:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Python subprocess execution detectedscripts/kimi_login.py:446 · Python subprocess execution detected
AST05
HIGH
Outbound HTTP to raw IP addressscripts/kimi_login.py:15 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
URL using raw IP addressSKILL.md:65 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Outbound HTTP to raw IP addressscripts/kimi_login.py:389 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Credential pass-through configurationSKILL.md:69 · Credential pass-through configuration — agent relays sensitive credentials
AST02
HIGH
Python subprocess execution detectedscripts/kimi_login.py:504 · Python subprocess execution detected
AST05
CRITICAL
Credential pass-through configurationskill-card.md:31 · Credential pass-through configuration — agent relays sensitive credentials
AST02
HIGH
Outbound HTTP to raw IP addressSKILL.md:69 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Python subprocess execution detectedscripts/kimi_login.py:445 · Python subprocess execution detected
AST05
CRITICAL
Access to sensitive file pathsSKILL.md:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/kimi_login.py:563 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Privileged sudo commandscripts/kimi_login.py:489 · Privileged sudo command — agent may execute with elevated privileges
AST05
CRITICAL
Credential pass-through configurationscripts/kimi_login.py:295 · Credential pass-through configuration — agent relays sensitive credentials
AST02
HIGH
Python subprocess execution detectedscripts/kimi_login.py:497 · Python subprocess execution detected
AST05
HIGH
Outbound HTTP to raw IP addressscripts/kimi_login.py:528 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Python subprocess execution detectedscripts/kimi_login.py:481 · Python subprocess execution detected
AST05
CRITICAL
Access to sensitive file pathsscripts/kimi_login.py:407 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addressSKILL.md:65 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Access to sensitive file pathsSKILL.md:102 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
URL using raw IP addressscripts/kimi_login.py:528 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressscripts/kimi_login.py:389 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressscripts/kimi_login.py:15 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressSKILL.md:69 · URL using raw IP address — may bypass domain-based filtering
AST07