Kimi 正在为桌面上选中的文本打造一款类似 PopClip 的 AI 工具栏

Finding

Kimi Desktop 3.2.3 contains an unannounced “Selection toolbar” that detects highlighted text across the operating system and places AI Search, Translate, Summary, Copy, and Read Aloud controls beside it, although those actions are not yet wired up.

How we verified

Methods: reverse engineering.

RuntimeWire reverse-engineered the app.asar files in the Kimi latest binary

The investigation:

1. Recorded the archive’s cryptographic hash.
2. Extracted the Electron application without modifying the installed copy.
3. identified the packaged build manifest and application version.
4. Enumerated its main-process, preload, and renderer components.
5. Decoded obfuscated string tables where necessary.
6. Traced the Selection toolbar from its settings entry to the operating-system selection monitor and floating renderer.
7. Inspected the complete toolbar bundle for action handlers, IPC calls, exposed desktop APIs, and command dispatch.
8. Compared the finding with Kimi’s public documentation and release notes.

No server access, account impersonation, credential extraction, or interaction with non-public company systems was used.

Tested versions:

• Application: Kimi Desktop Analyzed version: 3.2.3 Build timestamp: August 27
• 2026 at 11:48:29.668Z Git revision embedded in manifest: 050d81512

Reproduction

RuntimeWire partially reproduced the finding.

RuntimeWire obtained the production app.asar archive installed with Kimi Desktop 3.2.3 and analyzed it locally.

File hashes

• app.asar- SHA256 0724FCFBC07DFB3F65DAEA3D4033E83D79C7EC1E1A97D94FED85BBC7996E6D06

Company response

RuntimeWire requested comment; the company had not responded by publication time.