kiro-skill — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited kiro-skill (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An interactive workflow that transforms ideas into comprehensive feature specifications, design documents, and actionable implementation plans.
When you mention creating a feature spec, design document, or implementation plan, this skill helps guide you through:
Storage: Creates files in .kiro/specs/{feature-name}/ directory (kebab-case naming)
Read helpers/kiro-identity.md before responding. It defines tone, language preference, and minimal-code philosophy.
If you need visual phase gates or flow references, see helpers/workflow-diagrams.md.
<details> <summary>📋 Phase 1: Requirements Gathering</summary>
Transform a rough idea into structured requirements with user stories and EARS acceptance criteria.
.kiro/specs/{feature-name}/requirements.md# Requirements Document
## Introduction
[Feature summary - what problem does this solve?]
## Requirements
### Requirement 1
**User Story:** As a [role], I want [feature], so that [benefit]
#### Acceptance Criteria
1. WHEN [event] THEN [system] SHALL [response]
2. IF [precondition] THEN [system] SHALL [response]
3. WHEN [event] AND [condition] THEN [system] SHALL [response]
### Requirement 2
**User Story:** As a [role], I want [feature], so that [benefit]
#### Acceptance Criteria
1. WHEN [event] THEN [system] SHALL [response]Easy Approach to Requirements Syntax - structured acceptance criteria:
WHEN [event] THEN [system] SHALL [response] - Event-drivenIF [condition] THEN [system] SHALL [response] - ConditionalWHILE [state] [system] SHALL [response] - State-drivenWHERE [feature] [system] SHALL [response] - Ubiquitous[system] SHALL [response] - UnconditionalIf clarification stalls:
</details>
<details> <summary>🎨 Phase 2: Design Document Creation</summary>
Create comprehensive design document based on approved requirements, conducting research during the design process.
.kiro/specs/{feature-name}/requirements.mdCreate .kiro/specs/{feature-name}/design.md with:
Overview
Architecture
Components and Interfaces
Data Models
Error Handling
Testing Strategy
# Feature Design
## Overview
[High-level approach and key decisions]
## Architecture
graph TD A[Component A] --> B[Component B] B --> C[Component C]
## Components and Interfaces
### Component A
- Purpose: [What it does]
- Interfaces: [APIs it exposes]
- Dependencies: [What it needs]
## Data Models
interface UserModel { id: string; email: string; role: UserRole; }
[Continue with other sections...]
### Review & Iteration
3. **Ask for Approval**
- After creating/updating design
- Ask: "Does the design look good? If so, we can move on to the implementation plan."
- Make modifications if user requests changes
- Continue feedback-revision cycle until explicit approval
- **DO NOT proceed to tasks without clear approval**
### Key Principles
- **Research-driven**: Inform decisions with research
- **Comprehensive**: Address all requirements
- **Visual when helpful**: Include diagrams
- **Decision documentation**: Explain rationales
- **Iterative refinement**: Incorporate feedback
### Troubleshooting
If design becomes too complex:
- Break down into smaller components
- Focus on core functionality first
- Suggest phased approach
- Return to requirements to prioritize if needed
</details>
<details>
<summary>✅ Phase 3: Implementation Task List</summary>
## Tasks Phase
Convert approved design into actionable, test-driven implementation tasks.
### Prerequisites
- Ensure design.md exists and is approved
- Requirements and design provide context for tasks
### Task Generation Instructions
**Core Principle**: Convert design into prompts for code-generation LLM to implement each step in test-driven manner.
**Focus**:
- Incremental progress with early testing
- Build on previous tasks - no orphaned code
- ONLY tasks involving writing, modifying, or testing code
- No big jumps in complexity
**Exclude**:
- User acceptance testing or feedback gathering
- Deployment to production/staging
- Performance metrics gathering
- Running application for manual testing (but OK to write automated end-to-end tests)
- User training or documentation creation
- Business process changes
- Marketing or communication activities
### Task Format
Create `.kiro/specs/{feature-name}/tasks.md` with:
[Additional tasks...]
### Task Requirements
**Structure**:
- Maximum two-level hierarchy (tasks and sub-tasks)
- Use decimal notation for sub-tasks (1.1, 1.2, 2.1)
- Each item must be a checkbox
- Simple structure preferred
**Each Task Must Include**:
- Clear objective involving code (writing, modifying, testing)
- Additional info as sub-bullets
- Specific requirement references (granular sub-requirements, not just user stories)
**Quality Standards**:
- Discrete, manageable coding steps
- Incremental builds on previous steps
- Test-driven development prioritized
- Covers all design aspects implementable through code
- Validates core functionality early
### Review & Iteration
3. **Ask for Approval**
- After creating/updating tasks
- Ask: "Do the tasks look good?"
- Make modifications if user requests changes
- Continue feedback-revision cycle until explicit approval
- **Stop once approved - do not proceed to implementation**
### Completion
**Important**: This workflow is ONLY for creating planning artifacts.
- DO NOT implement the feature as part of this workflow
- Inform user they can execute tasks by:
- Opening tasks.md
- Clicking "Start task" next to items
- Or asking you to execute specific tasks
</details>
<details>
<summary>⚙️ Phase 4: Task Execution</summary>
## Execute Phase
Implement specific tasks from the feature specification with precision and focus.
### Prerequisites
**ALWAYS read spec files first**:
- `.kiro/specs/{feature-name}/requirements.md`
- `.kiro/specs/{feature-name}/design.md`
- `.kiro/specs/{feature-name}/tasks.md`
Never execute tasks without understanding full context.
### Execution Process
1. **Task Selection**
- If task number/description provided: Focus on that specific task
- If no task specified: Review task list and recommend next logical task
- If task has sub-tasks: Always complete sub-tasks first
2. **Implementation**
- **ONE task at a time** - Never implement multiple without approval
- **Minimal code** - Write only what's necessary for current task
- **Follow the design** - Adhere to architecture decisions
- **Verify requirements** - Ensure implementation meets specifications
3. **Completion Protocol**
- Once task complete, STOP and inform user
- DO NOT proceed to next task automatically
- Wait for user review and approval
- Only run tests if explicitly requested
### Efficiency Principles
- **Parallel operations**: Execute independent operations simultaneously
- **Batch edits**: Use MultiEdit for multiple changes to same file
- **Minimize steps**: Complete tasks in fewest operations
- **Check your work**: Verify implementation meets requirements
### Response Patterns
**For implementation requests**:
1. Read relevant spec files
2. Identify the specific task
3. Implement with minimal code
4. Stop and await review
**For information requests**:
- Answer directly without starting implementation
- Examples: "What's the next task?", "What tasks are remaining?"
### Key Behaviors
- Be decisive and precise
- Focus intensely on single requested task
- Communicate progress clearly
- Never assume user wants multiple tasks done
- Respect the iterative review process
</details>
---
## Workflow Rules
- **Never skip phases** - Always progress sequentially
- **Explicit approval required** - Get user approval after each document
- **No combined steps** - Don't merge multiple phases
- **Iterative refinement** - Continue feedback-revision until approved
- **One task at a time** - During execution, focus on single task
## Workflow Diagram
stateDiagram-v2 [*] --> Requirements
Requirements --> ReviewReq : Complete ReviewReq --> Requirements : Changes ReviewReq --> Design : Approved
Design --> ReviewDesign : Complete ReviewDesign --> Design : Changes ReviewDesign --> Tasks : Approved
Tasks --> ReviewTasks : Complete ReviewTasks --> Tasks : Changes ReviewTasks --> [*] : Approved
Execute : Execute Single Task [] --> Execute : Task Request Execute --> [] : Complete
## Detection Logic
Determine current state by checking:
if [ -d ".kiro/specs" ]; then
ls .kiro/specs/
FEATURE="$1" if [ -f ".kiro/specs/$FEATURE/requirements.md" ]; then echo "Requirements exists" fi if [ -f ".kiro/specs/$FEATURE/design.md" ]; then echo "Design exists" fi if [ -f ".kiro/specs/$FEATURE/tasks.md" ]; then echo "Tasks exists - ready for execution" fi fi
## Summary
Kiro provides a structured, iterative approach to feature development:
- Start with **requirements** (what to build)
- Progress to **design** (how to build it)
- Create **tasks** (implementation steps)
- **Execute** tasks one at a time
Each phase requires explicit user approval before proceeding, ensuring alignment and quality throughout the development process.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.