Maintainer of this skill?
Automated security scan — not a certification.
by kirodotdev
A persistent workspace for development work that self-improves and continues beyond one session.
# Add to your Claude Code skills
git clone https://github.com/kirodotdev/KiroCrewGuides for using ai agents skills like KiroCrew.
Last scanned: 8/5/2026
{
"issues": [
{
"file": "AGENTS.md",
"line": 87,
"type": "secret-exfiltration",
"message": "Instruction appears to send credentials/secrets to an external endpoint",
"severity": "medium"
},
{
"file": "README.md",
"line": 70,
"type": "remote-install",
"message": "Install command (remote install script piped to a shell — review the source before running): \"curl -fsSL https://download.crew.kiro.dev/cli.sh | sh\"",
"severity": "low"
},
{
"file": "skills/kirocrew-commands/SKILL.md",
"line": 219,
"type": "secret-exfiltration",
"message": "Instruction appears to send credentials/secrets to an external endpoint",
"severity": "medium"
},
{
"file": "src/kiro_crew/builtin_skills/artifacts/SKILL.md",
"line": 184,
"type": "prompt-injection",
"message": "Possible concealment directive: \"never tell the user\"",
"severity": "medium"
}
],
"status": "PASSED",
"scannedAt": "2026-08-05T06:27:21.249Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how KiroCrew compares with popular alternatives.
KiroCrew is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by kirodotdev. A persistent workspace for development work that self-improves and continues beyond one session. It has 4,745 GitHub stars.
Yes. KiroCrew passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/kirodotdev/KiroCrew" and add it to your Claude Code skills directory (see the Installation section above).
KiroCrew is primarily written in Python. It is open-source under kirodotdev on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh KiroCrew against similar tools.
No comments yet. Be the first to share your thoughts!
From $49 · 30 days · terms & refunds
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Automated security scan — not a certification.
You choose how to run Kiro Crew: the desktop app with automatic updates, a
one-line install on your machine or a remote host, the Docker image for
always-on servers, or a build from source. The default agent runs on
kiro-cli, which you install and sign in to separately. First launch checks
that prerequisite and links to the official setup guide when it is missing.
Each link fetches the newest build on that channel, and the app then updates itself on the same channel. Take Stable unless you have a reason not to; see Release channels below.
| Download | Stable | Insider | Nightly |
|---|---|---|---|
macOS (Apple Silicon/Intel) .dmg |
Stable | Insider | Nightly |
Windows (x64) .exe |
Stable | Insider | Nightly |
Linux x86_64 .deb |
Stable | Insider | Nightly |
Linux aarch64 .deb |
Stable | Insider | Nightly |
Linux x86_64 .rpm |
Stable | Insider | Nightly |
Linux aarch64 .rpm |
Stable | Insider | Nightly |
| Linux x86_64 AppImage | Stable | Insider | Nightly |
| Linux aarch64 AppImage | Stable | Insider | Nightly |
On Linux, start with the one-line install below and add a desktop package when you want a native window and in-app updates. The install guide owns which Linux package to pick, platform requirements, and sandbox setup.
Stable is the default; Insider follows release candidates, and Nightly follows
main. The release runbook owns the
current triggers, version shapes, promotion behavior, cadence, and update-lane
semantics.
Install the signed Stable wheel without cloning the repository or building the frontend:
curl -fsSL https://download.crew.kiro.dev/cli.sh | sh
Then open http://localhost:5476. Pass --version to pin an exact release —
the minimum pinnable release is 0.1.2, because 0.1.0 and 0.1.1 predate
manifest signing and have no signed manifest to resolve:
curl -fsSL https://download.crew.kiro.dev/cli.sh | sh -s -- --version 0.6.0
The install guide owns channel selection, managed versus system Python, mirrors, first-run setup, upgrades, and recovery.
For always-on servers, the Gateway ships as a public multi-arch image on GHCR:
docker run -d --name kirocrew \
-p 127.0.0.1:5476:5476 \
-v kirocrew-home:/home/kirocrew \
ghcr.io/kirodotdev/kirocrew:stable
See the Docker guide for first-run login, channel tags, and the container security model.
macOS and Linux require Python 3.12+, Node.js 22.12+ (24 LTS recommended), and
npm. The default ACP backend also requires
kiro-cli: install it on the Gateway host and run
kiro-cli login before using that backend. Other verified ACP harnesses have
their own prerequisites in the install guide. Windows
is supported through a native source install; follow the
Windows guide instead of the shell steps below.
# 1. Clone and build Kiro Crew
git clone https://github.com/kirodotdev/KiroCrew.git
cd KiroCrew
make build
source .venv/bin/activate
# 2. Configure, verify, and start
kirocrew setup
kirocrew doctor
kirocrew gateway
Most agent sessions end when the chat closes. Kiro Crew runs continuously on hardware you control and keeps working between conversations.
Persistent. Sessions, memory, schedules, and task checkpoints survive Gateway restarts, and scheduled or reactive work continues without someone at the terminal.
Self-learning. Corrections and task failures become durable lessons. Preferences and project context carry into new sessions.
Self-evolving. Repeated patterns become reusable skills. Memory, lessons, and skills stay visible and editable, so each Kiro Crew grows more tailored to the person and work around it.
Runs where you choose. Your Mac, a local container, or a remote machine you control.
One Gateway, many surfaces. Work directly in the desktop app or web dashboard, or continue the same work from the CLI and messaging surfaces like Slack and Discord.
| Capability | What it gives you |
|---|---|
| Persistent sessions | Run concurrent, isolated conversations, resume them after Gateway restarts, search prior sessions, and carry recent context into new work. |
| Self-learning | Turn corrections and task failures into durable lessons that change later behavior. Lessons can apply globally or carry a repo_scope that limits them to one repository; Crew Members keep private lessons in their own memory store. |
| Self-evolving skills | Synthesize reusable skills from repeated patterns, then inspect, refine, or remove them as your work changes. |
| Long-running tasks | Give Kiro Crew a task spec and walk away. It plans steps, executes them, validates results, retries failures, and resumes from checkpoints. "Implement this migration plan and stop if the tests fail" runs as a checkpointed task with validation at each step. |
| Unattended autonomy | Run scheduled agent work or deterministic scripts and commands without a model call. Monitor work until it is |