AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Kimi First

skill-boringmarketer-kimi-first-kimi-first · by boringmarketer

Route implementation work-orders to Kimi k3 lanes via the Kimi Code CLI; Claude specs, orchestrates, reviews, verifies. Use when a task is a frozen-spec build, mechanical migration, test fill, bulk sweep, or CI fix — anything that reads as a work order rather than a design problem.

No reviews yet
0 installs
20 views
0.0% view→install

Install

$ agentstack add skill-boringmarketer-kimi-first-kimi-first

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets Used
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-boringmarketer-kimi-first-kimi-first)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
1mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Kimi First? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Kimi First

Claude Code sessions only. Rationale: Kimi k3 lanes run flat-rate on the Kimi membership and are strong at implementation throughput; Claude's edge is judgment, specs, orchestration, review. Kimi types, Claude thinks and verifies. (Adapted from codex-first in steipete/agent-scripts.)

Route

Delegate to Kimi (default for hands-on volume):

  • implementation from a frozen spec; refactors; mechanical migrations/sweeps
  • bug fixes with a known repro; test writing; coverage fills
  • CI fixes, dependency bumps, scripts/tooling
  • bulk exploration where raw reading ≫ the answer

Keep in Claude (never delegate):

  • design, architecture, naming, product judgment — tasks where writing the spec IS the work
  • tiny edits ("$P"

EOF (cd && kimi -p "$(cat "$P")" > "$SCRATCHPAD/kimi-last.md" 2>/dev/null)


- `-p` is headless: no approvals asked, tool calls run under auto permission; static
  deny rules still apply. `--yolo`/`--auto` cannot combine with `-p` — and aren't needed.
- stdout is assistant text with a `• ` transcript prefix (strip if parsing); thinking and
  tool progress go to stderr — keep `2>/dev/null`, drop only to debug a failing run
- run long jobs with Bash `run_in_background`; read the output file on completion
- only delegate from repos without prod secrets in reach — headless mode auto-approves
  regular tool calls, there is no more-restricted non-interactive tier
- follow-ups: `(cd  && kimi --continue -p "$(cat "$P2")" > "$SCRATCHPAD/kimi-last.md" 2>/dev/null)`
  — resumes the latest session in that dir, keeps context (verified: remembers prior run)
- parallel independent orders OK: separate repos/dirs, separate output files.
  `--continue` is cwd-filtered, so never run two concurrent sessions in the same dir —
  they'd race on the same "latest session"

## Prompt contract

Kimi starts with ZERO session context. Every prompt: goal, exact repo/paths, constraints,
non-goals, proof expected, output shape. Spec quality decides success.

## Verify (Claude, always)

- `git status -sb` + read the FULL diff; judge like a hostile contributor-PR review
- run the focused tests yourself or demand proof output; Kimi claims are advisory
- iterate via `--continue`; after 2 failed rounds, take over and do it directly
- ship through normal repo protocol (commit/create-pr skills, CI watch) — Claude's hands
  on the merge button, never Kimi's
- substantive results feed a cross-vendor adversarial review (Claude attacks
  Kimi-built work) before merge

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [boringmarketer](https://github.com/boringmarketer)
- **Source:** [boringmarketer/kimi-first](https://github.com/boringmarketer/kimi-first)
- **License:** MIT
- **Homepage:** https://boringmarketing.com

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.