kmdr - Kmoe Manga Downloader

• Outcome: Review
• Latest audit: May 28, 2026 at 1:25 PM UTC
• Version:
  1.0.0-a1

Overview

This manga downloader skill is mostly coherent, but it exposes local credential storage and a configurable post-download command callback that need careful review.

Install only if you trust the kmdr CLI package and understand where it stores credentials. Prefer logging in manually instead of giving an agent your password, use explicit download destinations, avoid the callback option unless you fully trust the exact command, and remove stored credentials when finished on shared or sensitive machines.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Context-Inappropriate Capability

High

• Confidence: 96% confidence
• Finding: The documented `config --set callback=<value>` capability introduces arbitrary command execution unrelated to the core purpose of searching/downloading manga and managing credentials. If an agent or user can set this value from untrusted input, the tool may execute shell/system commands on download completion, creating a direct code-execution path on the host.

Missing User Warnings

Medium

• Confidence: 84% confidence
• Finding: The login and credential-pool commands explicitly save usernames, passwords, cookies, and quota data, but the documentation gives no warning that credentials will be stored locally. This creates a meaningful risk of accidental secret persistence, mishandling, or insecure local storage, especially in agent-driven environments where users may not realize credentials are being retained.

Missing User Warnings

Medium

• Confidence: 81% confidence
• Finding: The `download` command performs filesystem writes and supports background execution, yet the documentation does not clearly warn that it will create files and continue unattended. In an agent setting, this increases the chance of unexpected disk usage, writing to sensitive locations, or long-running activity persisting after the initiating interaction ends.

Missing User Warnings

High

• Confidence: 97% confidence
• Finding: The `callback` configuration is especially dangerous because the documentation presents it as an ordinary string setting without warning that it will execute a system command when a download completes. This can mislead users or upstream agents into treating it as harmless configuration, enabling accidental or attacker-influenced command execution.

VirusTotal

66/66 vendors flagged this skill as clean.