kiro-project-setup — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited kiro-project-setup (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Sets up a complete Kiro project structure so your AI assistant understands your project conventions, has access to custom skills, and respects your configuration preferences.
When triggered, perform the following steps:
conventions.md file containing:SKILL.md explaining that project-specific skills live here.kiro/ temp files if needed:.kiro/cache/ or .kiro/tmp/ to .gitignore.kiro/steering/ and .kiro/skills/ tracked in version controlAsk the user about their project before generating files. Gather:
.kiro/conventions.md concise and actionable - avoid vague guidance.kiro/steering/ files so the whole team benefits.kiro/ directory, offer to enhance rather than replaceUser says: "Set up Kiro for my TypeScript project"
Response:
Create the following structure:
.kiro/
steering/
conventions.md
skills/Where conventions.md contains:
# Project Conventions
## Naming
- Files: kebab-case (e.g., user-service.ts)
- Classes: PascalCase
- Functions and variables: camelCase
- Constants: UPPER_SNAKE_CASE
## Code Style
- Use TypeScript strict mode
- Prefer async/await over raw promises
- Maximum line length: 100 characters
## Architecture
- Follow domain-driven structure under src/
- Keep business logic separate from infrastructure
- Use dependency injection for testabilityAnd optionally add to .gitignore if your tools generate cache or temp files:
# Kiro temp files (add if your tools create these directories)
.kiro/cache/
.kiro/tmp/~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.