company-search-kimi

PassAudited by ClawScan on May 1, 2026.

Overview

This is an instruction-only public company research skill with disclosed web search/fetch use and no code, install step, or credentials, though users should note its limited provenance and external search-provider use.

This skill appears suitable for public company research. Before installing, be aware that your research targets and search terms may be processed by external search/fetch tools, and verify important business or legal conclusions against the cited sources.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may send the company being researched and related query terms to search/fetch services and retrieve many public webpages.

Why it was flagged

The skill explicitly relies on search and page-fetching tools to collect public company information. This is purpose-aligned, but users should understand that it performs broad external web lookups.

Skill content
Tools Required - kimi_search ... kimi_fetch ... (optional) web_search / web_fetch
Recommendation

Use it for public-source research and avoid entering confidential investigation details unless you are comfortable sending those queries to the search provider.

What this means

Users have less external provenance information to confirm who authored or maintains the skill.

Why it was flagged

The registry metadata does not provide a source or homepage, and the package name/version do not exactly match the registry entry. There is no executable code or install step, so this is a provenance note rather than a material concern.

Skill content
Source: unknown; Homepage: none; registry version: 1.0.4; package.json version: 2.0.0
Recommendation

Review the visible instructions before use and prefer skills with clear source/homepage metadata for higher-assurance environments.