Kimi Quota

查询 Kimi API 用量、订阅额度和账户信息。当用户询问"Kimi 额度"、"API 用量"、"剩余次数"、"订阅状态"或需要查看 Kimi Code 使用情况时使用。支持加密保存登录态，首次配置后自动查询。

Security Scan

The skill's files and runtime instructions are coherent with its stated purpose (querying Kimi account/quota) and request only the cookies needed for that task; no unrelated credentials, network endpoints, or installer downloads are present.

Purpose & Capability

Name/description: query Kimi API usage, subscriptions and account info. The code only contacts https://www.kimi.com API endpoints, accepts a Kimi cookie (kimi-auth), and formats usage/subscription information. No unrelated services, binaries, or credentials are requested.

Instruction Scope

SKILL.md instructs the user to paste the 'kimi-auth' cookie and run scripts/check_quota.py. The script reads/stores that cookie locally and uses it to call Kimi APIs — this is within scope. Note: the script will store the cookie at ~/.config/kimi-quota/cookie.enc (or plaintext if cryptography is missing); the SKILL.md and script both explain how to clear it. This persistence and local storage are expected but worth noting for privacy.

Install Mechanism

No installer or remote downloads are used. The project is instruction/code-only and asks users to pip install requests and cryptography if needed — a standard, low-risk dependency flow. No external URL downloads or archive extraction are present.

Credentials

No required environment variables are declared. An optional KIMI_QUOTA_KEY env var is supported to provide an explicit encryption key. That is appropriate for protecting the saved cookie. The script also derives a key from local machine identifiers if not provided (not as strong as a user-provided secret).

Persistence & Privilege

The skill writes two files under the user's home config (~/.config/kimi-quota): a salt file and a cookie file. Files are set to mode 600. This is expected for storing login state but gives the skill persistent local presence limited to the user's config directory. always:false and no modification of other skills or system settings.

Assessment

This skill appears to do what it claims: it requires you to supply your kimi-auth cookie and then calls Kimi's own APIs. Before installing/using: 1) only paste the cookie if you trust the code and the environment; the cookie is essentially an auth token. 2) Install cryptography (pip install cryptography) so the cookie is encrypted; otherwise it will be stored in plaintext. 3) If you prefer stronger secrecy, set KIMI_QUOTA_KEY to a passphrase you control rather than relying on the machine-derived key. 4) To remove credentials later run the script with --clear or delete ~/.config/kimi-quota. 5) If you have any doubt, review scripts/check_quota.py yourself or run it in an isolated environment (container or VM).

查询 Kimi Code/API 用量、订阅套餐和功能额度。

快速使用

# 首次使用 - 保存 Cookie
python3 scripts/check_quota.py --cookie "kimi-auth=xxx" --save

# 之后使用 - 自动读取保存的 Cookie
python3 scripts/check_quota.py

# 查看 JSON 格式
python3 scripts/check_quota.py --json

# 清除保存的登录态
python3 scripts/check_quota.py --clear

获取 Cookie

1. 登录 https://www.kimi.com
2. F12 → Application → Cookies → kimi-auth
3. 复制值（格式：eyJhbGciOiJIUzUxMiIs...）

安全说明

Cookie 使用 Fernet 加密存储，密钥派生自机器标识。也可设置环境变量：

export KIMI_QUOTA_KEY="your-secret-key"

存储位置：~/.config/kimi-quota/cookie.enc

查询内容

• API 用量: 本周使用百分比、剩余次数、重置时间
• 频限明细: 5分钟窗口限额、重置时间
• 订阅信息: 套餐、价格、周期、续费时间
• 功能额度: 深度研究、Agent、PPT 剩余次数

依赖

pip install requests cryptography