AI tool official cli
Risk level
low
10/100

Kiro CLI ↗

Kiro CLI is an officially published AI tool from Amazon. Anomity scores its risk at 10 out of 100 (low).

Analysis summary

Kiro CLI is an officially published AI tool from Amazon. Anomity scores its risk at 10 out of 100 (low).

Kiro terminal agent (kiro-cli, successor to the Amazon Q Developer CLI); shares ~/.kiro (MCP, skills, steering, agents) with the Kiro IDE, so presence is keyed on the CLI-only settings file

Why this entry scored 10 out of 100

This profile starts at the catalog's neutral base of 50. Because the entry is officially published, trust adjusts the score by -40. The entry declares no high-risk capabilities on its own, so capabilities add nothing. It matches no dangerous capability combinations. The clamped result is 10, placing it in the low band.

See the full scoring formula →

Findings

  • Published by the vendor Trust offset
    Contribution to score: -40

Configuration surface

Files this AI tool reads on the host. Anything written here changes what the agent does next.

  • kiro-cli-settings global json
    Kiro CLI settings (presence = Kiro CLI configured for this user)
    • win32${USERPROFILE}\.kiro\settings\cli.json
    • darwin${HOME}/.kiro/settings/cli.json
    • linux${HOME}/.kiro/settings/cli.json
  • kiro-cli-data global binary
    Kiro CLI local database (presence only - holds sign-in tokens, never read)
    • darwin${HOME}/Library/Application Support/kiro-cli/data.sqlite3
  • kiro-cli-global-agents global json
    Custom agents (global, carry mcpServers)
  • kiro-cli-project-agents project json
    Custom agents (project, carry mcpServers)
  • kiro-cli-global-hooks global json
    Global hooks (~/.kiro/hooks/*.json, Kiro CLI V3 only; presence)
  • kiro-cli-user-permissions global yaml
    User permission rules (~/.kiro/settings/permissions.yaml, CLI V3; presence)
    • win32${USERPROFILE}\.kiro\settings\permissions.yaml
    • darwin${HOME}/.kiro/settings/permissions.yaml
    • linux${HOME}/.kiro/settings/permissions.yaml
  • kiro-cli-global-agents-md global markdown-frontmatter
    Custom agents in the V3 Markdown format (global; frontmatter can carry mcpServers)
  • kiro-cli-project-agents-md project markdown-frontmatter
    Custom agents in the V3 Markdown format (project)