← All skills
security-conductor
82 / 100 · Low risk
Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By kirodotdev/KiroCrew (GitHub) · security · 4,889 stars · scanned at commit f2c5c50
Operating procedure for the kirocrew-security-conductor agent. Use when a security conductor session is seeded, inspected or debugged. Run vulnerability discovery on one target as a supervised fleet — one auditor per attack surface, an independent verifier per finding, two human gates.
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 2 places.
Runs commands on your computer
This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.
Found in 25 places.
Show 17 more
- src/kiro_crew/builtin_skills/security-conductor/scripts/ledger.py, line 114
not exist. Reads and writes one SQLite file; no network, no subprocess. - src/kiro_crew/builtin_skills/security-conductor/scripts/verify_finding.py, line 88
subprocess. No network of its own. - src/kiro_crew/builtin_skills/security-conductor/scripts/verify_finding.py, line 631
def reap(process: subprocess.Popen[bytes]) -> None: - src/kiro_crew/builtin_skills/security-conductor/scripts/verify_finding.py, line 717
subprocess.run( - src/kiro_crew/builtin_skills/security-conductor/scripts/verify_finding.py, line 719
stdout=subprocess.DEVNULL, - src/kiro_crew/builtin_skills/security-conductor/scripts/verify_finding.py, line 720
stderr=subprocess.DEVNULL, - src/kiro_crew/builtin_skills/security-conductor/scripts/verify_finding.py, line 726
except (OSError, subprocess.SubprocessError): - src/kiro_crew/builtin_skills/security-conductor/scripts/verify_finding.py, line 732
except subprocess.TimeoutExpired: - src/kiro_crew/builtin_skills/security-conductor/scripts/verify_finding.py, line 747
process = subprocess.Popen( - src/kiro_crew/builtin_skills/security-conductor/scripts/verify_finding.py, line 751
stdout=subprocess.DEVNULL, - src/kiro_crew/builtin_skills/security-conductor/scripts/verify_finding.py, line 752
stderr=subprocess.DEVNULL, - src/kiro_crew/builtin_skills/security-conductor/scripts/verify_finding.py, line 755
stdin=subprocess.DEVNULL, - src/kiro_crew/builtin_skills/security-conductor/scripts/verify_finding.py, line 762
subprocess.CREATE_NEW_PROCESS_GROUP # type: ignore[attr-defined] - src/kiro_crew/builtin_skills/security-conductor/scripts/verify_finding.py, line 776
except subprocess.TimeoutExpired: - src/kiro_crew/builtin_skills/security-conductor/scripts/verify_fix.py, line 473
def reap(process: subprocess.Popen[bytes]) -> None: - src/kiro_crew/builtin_skills/security-conductor/scripts/verify_fix.py, line 491
except subprocess.TimeoutExpired: - src/kiro_crew/builtin_skills/security-conductor/scripts/verify_fix.py, line 515
pipe = subprocess.PIPE if capture else subprocess.DEVNULL
and 5 more places
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'security-conductor' ] || [ -L ~/.agents/skills/'security-conductor' ]; then echo 'A skill folder named security-conductor already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/kirodotdev/KiroCrew' "$d" && git -C "$d" checkout --quiet 'f2c5c50d602f1e6c2059a407b3a0c6fca6db44da' -- 'src/kiro_crew/builtin_skills/security-conductor' && mkdir -p ~/.agents/skills && cp -R "$d"/'src/kiro_crew/builtin_skills/security-conductor' ~/.agents/skills/'security-conductor' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'security-conductor' ~/.claude/skills/'security-conductor' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for kirodotdev/KiroCrew shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/kirodotdev/KiroCrew/)
Score history
| Date | Version | Score |
|---|
| 2026-11-11 | f2c5c50 | 82 |