registry / @botiverse/kimi-code-sdk / 0.22.0

@botiverse/kimi-code-sdk@0.22.0

Botiverse repackage of @moonshot-ai/kimi-code-sdk (from kimi-code @moonshot-ai/kimi-code@0.22.0) — built node-sdk bundle for Slock. Mirror of MoonshotAI/kimi-code.

AI Security Review

scanned 19h ago · by lpm-firewall-ai

No confirmed malicious attack surface. The bundled SDK can perform agent-oriented filesystem and shell operations only through its exported harness/session runtime, and network use targets configured model and service endpoints.

Static reason

No blocking static signals were detected.

Trigger

Application explicitly imports and invokes exported SDK or Kimi harness APIs.

Impact

No install-time mutation, stealth persistence, or unsolicited data transfer was established.

Mechanism

Caller-invoked AI-agent runtime with configurable provider requests and local tools.

Rationale

Direct inspection shows a bundled Kimi Code SDK with package-aligned network, configuration, shell, and filesystem capabilities. There are no lifecycle hooks or concrete unconsented execution, persistence, credential theft, or exfiltration chain.

Evidence

package.jsonREADME.mddist/index.mjs

Network endpoints3

api.moonshot.ai/v1api.moonshot.cn/v1api.openai.com/v1

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

@botiverse/kimi-code-sdk@0.22.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code