everything-kiro

mcp
Guvenlik Denetimi
Uyari
Health Uyari
  • No license — Repository has no license file
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 25 GitHub stars
Code Gecti
  • Code scan — Scanned 12 files during light audit, no dangerous patterns found
Permissions Gecti
  • Permissions — No dangerous permissions requested
Purpose
This is a configuration bundle and template library for Kiro IDE, providing a collection of production-ready agents, workflow skills, and MCP integration setups to enhance developer productivity.

Security Assessment
Overall Risk: Low. The tool does not request dangerous permissions, and a code scan of its files revealed no dangerous patterns or hardcoded secrets. Based on the repository contents, it primarily acts as a repository of Markdown instructions, templates, and JSON configurations rather than an executable application. While the included configuration files and specialized agents (like the devops-specialist or debug-detective) could eventually be used to instruct your IDE to execute shell commands or interact with local infrastructure, the configurations themselves do not perform these actions directly.

Quality Assessment
Quality: Good. The project is very recently maintained, with its last push occurring today. It has a small but appreciable level of community trust with 13 GitHub stars. However, the repository completely lacks a license file. This is a notable drawback for an open-source tool, as it legally means all rights are reserved by the author and you do not have explicit permission to use, modify, or distribute the code. Additionally, the exact compatible command-line interfaces (CLIs) are not specified.

Verdict
Use with caution: The configurations are safe, but the absence of a license makes it legally risky to use or adapt in commercial or production environments.
SUMMARY

The complete collection of Kiro IDE configs, agents, skills, hooks, and MCP integrations for maximum productivity.

README.md

Everything Kiro

A collection of Kiro IDE configurations — agents, hooks, steering files, powers, and skills — kept in sync with Kiro's actual current schemas.


What's Inside

everything-kiro/
├── .kiro/                        # Drop this whole folder into a workspace to use everything at once
│   ├── settings/
│   │   └── mcp.json              # MCP server configs (workspace-level)
│   ├── steering/                 # Always-active + conditional + manual context
│   │   ├── coding-standards.md   # inclusion: always
│   │   ├── security-rules.md     # inclusion: always
│   │   ├── project-patterns.md   # inclusion: always
│   │   ├── api-conventions.md    # inclusion: fileMatch (loads only for routes/controllers/api files)
│   │   └── release-checklist.md  # inclusion: manual (loads via /release-checklist)
│   └── hooks/                    # v1 JSON hooks, PascalCase triggers
│       └── *.json                # 12 hooks — see hooks/README.md for the list
│
├── agents/                       # 8 specialized sub-agents
│   ├── architect.md
│   ├── code-reviewer.md
│   ├── test-engineer.md
│   ├── devops-specialist.md
│   ├── debug-detective.md
│   ├── performance-optimizer.md
│   ├── security-auditor.md
│   └── documentation-writer.md
│
├── powers/                       # Kiro Powers (POWER.md + optional mcp.json + optional steering/)
│   ├── README.md                 # Real Powers schema reference
│   ├── development-power/        # Knowledge Base Power: code review, TDD, debugging, QA
│   ├── devops-power/             # Knowledge Base Power: deploy checklist, Docker, CI/CD
│   └── database-power/           # Guided MCP Power: Postgres inspection via MCP
│
├── skills/                       # Workflow documentation, invoked by agents or read directly
│   ├── development-workflows/
│   │   ├── spec-driven-development.md   # Real .kiro/specs/ format, EARS acceptance criteria
│   │   └── tdd-cycle.md
│   ├── language-patterns/
│   │   ├── typescript-best-practices.md
│   │   ├── python-conventions.md
│   │   └── react-patterns.md
│   └── infrastructure/
│       ├── docker-workflows.md
│       ├── ci-cd-patterns.md
│       └── monitoring-setup.md
│
├── hooks/
│   └── README.md                 # Hook schema reference — the runnable hooks live in .kiro/hooks/
│
├── examples/
│   ├── example-spec/             # A real, complete .kiro/specs/password-reset/ example
│   └── fullstack-webapp/         # Example project-level Kiro config (MCP, hooks, steering)
│
├── INSTALL.md
├── CONTRIBUTING.md
├── CHANGELOG.md
└── STATUS.md

Key Concepts (as they actually work today)

Steering files

Markdown files in .kiro/steering/ (workspace) or ~/.kiro/steering/ (user), loaded based on frontmatter:

---
inclusion: always        # default — every conversation
# inclusion: fileMatch
# fileMatchPattern: "**/*.api.ts"
# inclusion: manual      # loaded via slash command or #reference, not automatically
---

manual steering files show up as slash commands (/filename) — this replaced the old "manual hook trigger" concept entirely. If you're coming from a pre-1.0 setup that used manual hooks for on-demand routines, that functionality now belongs in steering, not hooks.

Hooks

Hooks are versioned JSON files at .kiro/hooks/*.json (workspace) or ~/.kiro/hooks/*.json (user, applies to every workspace):

{
  "version": "v1",
  "hooks": [{
    "name": "lint-on-save",
    "trigger": "PostFileSave",
    "matcher": "\\.ts$",
    "action": { "type": "command", "command": "npm run lint" },
    "timeout": 30
  }]
}

Triggers: SessionStart, Stop, UserPromptSubmit, PreToolUse, PostToolUse, PreTaskExec, PostTaskExec, PostFileCreate, PostFileSave, PostFileDelete. PreToolUse, UserPromptSubmit, and PreTaskExec can block — a command action exiting with code 2 stops the operation and returns stderr to the agent. See hooks/README.md for the full reference and every hook included here.

If you have hooks from before IDE 1.0 (the .hook file format with eventType/hookAction), they won't run until migrated — open the Agent Hooks panel and convert them via the upgrade badge.

Specs

Kiro's structured feature workflow: three gated files under .kiro/specs/{feature_name}/.

  1. requirements.md — EARS-format acceptance criteria (WHEN [event] THEN [system] SHALL [response]), approved before moving on
  2. design.md — architecture, interfaces, data models, addressing every requirement
  3. tasks.md — a checkbox list of coding-only tasks, each tagged with the requirement(s) it satisfies

Each phase requires explicit user approval before the next begins. See skills/development-workflows/spec-driven-development.md for the full format and examples/example-spec/ for a complete worked example. Quick Spec mode generates all three in one pass for smaller features, skipping the per-phase approval gates.

Powers

Powers package documentation (and optionally an MCP server) into something Kiro activates on demand, so you don't pay the context cost of every possible tool up front:

  • Knowledge Base PowerPOWER.md only, no MCP server (development-power, devops-power here)
  • Guided MCP PowerPOWER.md + mcp.json (database-power here)

There's no power.json — all metadata lives in POWER.md's YAML frontmatter. See powers/README.md for the schema and github.com/kirodotdev/powers for the official, much larger catalog (AWS, Stripe, Terraform, Zapier, and more) — install those through the Powers panel rather than reimplementing them here.

Agents

Sub-agents with a scoped persona, defined in agents/*.md with minimal frontmatter:

---
name: code-reviewer
description: Expert code reviewer specializing in security, performance, maintainability...
---

Kiro can invoke these proactively based on context, or you can ask for one by name.

MCP

External tool servers configured in .kiro/settings/mcp.json (workspace) or ~/.kiro/settings/mcp.json (user, used as fallback if no workspace config exists). Keep enabled servers to what a project actually needs — every enabled MCP server's tools count against context budget.

Kiro Crew

Kiro Crew runs on Kiro CLI and reads existing .kiro configuration. After installation, this repository's steering, hooks, skills, and custom-agent patterns can therefore be used by Crew without a separate migration.

This is compatibility documentation only: Everything Kiro intentionally does not ship a Crew manifest, schedules, Apps, integrations, or autonomous orchestration workflows. Configure those in Kiro Crew when and if your project needs them.


Installation

See INSTALL.md for the full walkthrough. Short version:

git clone https://github.com/iamaanahmad/everything-kiro.git
cp -r everything-kiro/.kiro your-project/.kiro
cp -r everything-kiro/agents your-project/.kiro/agents

Then edit .kiro/settings/mcp.json and replace the placeholder tokens with real credentials — never commit real secrets.


Contributing

See CONTRIBUTING.md. Short version: match the real schema (check kiro.dev/docs if unsure), keep claims in README/STATUS/CHANGELOG in sync with what's actually on disk, and don't add a component without also updating the file tree above.


Resources


License

MIT — use freely, modify as needed, contribute back if you can.

Yorumlar (0)

Sonuc bulunamadi