kimi-datasource
Universal data-source assistant for stocks (Wind, S&P, SEC EDGAR), macro (World Bank, IMF, FRED, NBS), Chinese government data and standards (GB/HB/DB/TT), corporate, academic, legal, WHO/FAO/OECD and other IGO data, financial news (Xinhua, Caixin). This plugin exposes tools via MCP server `plugin-kimi-datasource_data`; call them in the flow `mcp__plugin-kimi-datasource_data__get_data_source_desc` → `mcp__plugin-kimi-datasource_data__call_data_source_tool`.
70
85%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
2 low severity findings. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md 的标准工作流在运行时会先用 `get_data_source_desc` 读取“所选外部数据源的 Markdown 文档”，再用 `call_data_source_tool` 取数；其中 `call_data_source_tool` 的结果文本来自会被当作 LLM 输入的一手数据源响应（例如 `arxiv/scholar/yuandian_law/sec_edgar/xhcj/caixin/tianyancha` 等可能包含用户可自由发布/操控的内容），且该流程不要求额外的“先筛选具体条目后再读取”。
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The plugin fetches its backend tool API at the configured default https://api.kimi.com/coding/v1 (used as API_URL → /tools) during runtime and consumes returned Markdown/JSON to decide which data-source APIs and parameters to call, so remote content directly controls the agent's instructions.
- Repository
- MoonshotAI/kimi-code
- Commit
d4e0ad4
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.