Kiro

AWS's agentic IDE. Open VSX; full support.

Planned Designed and scheduled, not yet built. Documented so the design can be reviewed early.

Kiro is AWS’s VS Code-based agentic IDE. It is a desktop application with a local extension host, so everything works.

Install

Kiro uses Open VSX. Search Vulnetix in the Extensions view, or install the .vsix from Open VSX via Extensions: Install from VSIX.

Worth knowing

Spec-driven development produces a lot of code at once. Kiro’s workflow generates implementation from a specification, which means large changes landing in one step. Findings appear as files are written, so an insecure pattern is visible during review of the generated work rather than after it is merged.

Steering files are scanned as configuration. Vulnetix reads .kiro/steering and similar assistant configuration when building its AI Bill of Materials, so your AI tooling is inventoried alongside your dependencies. That matters for supply-chain questions about which models and SDKs a project actually uses.

AWS-adjacent infrastructure is covered. Terraform, CloudFormation-adjacent YAML, and Kubernetes manifests are scanned for misconfiguration: public buckets, wide-open security groups, IAM wildcards, unencrypted storage.

Also worth having

vulnetix skills install

installs Vulnetix agent skills where Kiro’s agent can reach them, so it can look up advisories and propose remediation as part of its normal workflow.

Didn't find what you needed? Tell us what's missing · Ask a question · Edit this page