Adoption

Agent Skills are supported by leading AI development tools.

VS Code Gemini CLI GitHub Goose Amp Cursor Claude Code Letta OpenCode Claude OpenAI Codex Factory VS Code Gemini CLI GitHub Goose Amp Cursor Claude Code Letta OpenCode Claude OpenAI Codex Factory

ariffazil/FORGE-kimi-code

Name: FORGE-kimi-code
Author: ariffazil

skills/ARCHIVE-dupe-2026-07-12/root_.agents_skills/FORGE-kimi-code/SKILL.md

npx skillsauth add ariffazil/openclaw-workspace FORGE-kimi-code

Clean

TrivyContainer and dependency vulnerability scanner

Clean

SemgrepStatic code analysis for vulnerabilities

Clean

mcp-scan (Snyk)Model Context Protocol security validation

Skipped

Snyk (dep)Open source security scanning

Skipped

Socket.devSupply chain security analysis

Skipped

VirusTotalMulti-engine malware detection

Skipped

CrowdStrikeAdvanced threat intelligence

Skipped

OSV-ScannerOpen Source Vulnerability database check

Skipped

OWASP Dep-Check

Kimi Code AAA Configuration

arifOS-ACT Embedding

Before using this skill on any mutating, irreversible, or high-blast-radius task:

ART — Attune (what is the real task?), Recognize (what class of power?), Test (fit · authority · evidence · blast · reversible).
Kernel — Route to arifOS for F1–F13 judgment if action class is Maker/Messenger/Mutator/Destroyer/Sovereign.
ACT — Apply narrow, Constrain scope, Trace witness, STOP before corruption.
Receipt — Leave evidence of what changed, why, and under whose authority.

When to Use

Kimi Code CLI fails with LLM 404, MCP source: not found, or missing federation tools
Migrating from legacy kimi-cli (uv, v1.47) to kimi-code (v0.18+)
Onboarding Kimi as warga AAA (FI-008)
Auditing mcp.json, config.toml, or KIMI_CODE_HOME drift

When NOT to Use

Do not use to rotate secrets in vault.env without 888_HOLD
Do not enable default_yolo = true for constitutional work
Do not wire A-FORGE HTTP :7071/mcp as primary ingress (single-session SDK limit)

Canonical Paths (af-forge VPS)

| Path | Purpose | |------|---------| | /root/.kimi-code/bin/kimi | kimi-code binary (v0.18+) | | /usr/local/bin/kimi | Federation wrapper (sets KIMI_CODE_HOME, unsets dead KIMI_API_KEY) | | $KIMI_CODE_HOME → /root/.arifos/agents/kimi | Config, MCP, hooks, credentials, skills | | /root/.arifos/agents/kimi/mcp.json | User-global MCP (13 servers, 9 active) | | /root/.mcp.json | Project-root MCP when cwd is /root | | /root/AAA/agents/kimi-code/WARGAAA_CARD.md | Warga identity card |

Official Docs

Install & first launch: https://platform.kimi.ai/docs/guide/kimi-cli-support
Config files: https://www.kimi.com/code/docs/kimi-code-cli/configuration/config-files.html
MCP: https://moonshotai.github.io/kimi-cli/en/customization/mcp.html
Migrate: kimi migrate (interactive — config only recommended)

Audit Checklist

Binary: which kimi → /usr/local/bin/kimi → exec ~/.kimi-code/bin/kimi
Home: echo $KIMI_CODE_HOME → /root/.arifos/agents/kimi
Doctor: kimi doctor → OK config.toml
Auth: OAuth via /login — never use dead KIMI_API_KEY from vault.env (causes 404)
MCP launchers: All stdio servers use mcp-launchers/*.sh (bash), not inline sh -lc with source
A-FORGE: stdio via aforge.sh — not HTTP for Kimi primary ingress
Serena: arifOS/.serena/project.yml and A-FORGE/.serena/project.yml exist
Warga: config.toml has [agent_identity] citizenship = "warga-aaa"

Fix Patterns

LLM 404 `resource_not_found_error`

Root cause: stale KIMI_API_KEY in environment overrides OAuth.

unset KIMI_API_KEY
kimi login   # or /login in TUI
kimi doctor

Wrapper at /usr/local/bin/kimi already unsets KIMI_API_KEY.

`sh: 35: source: not found`

Root cause: MCP stdio launchers invoked via sh with bash-only source.

Fix: use dedicated bash scripts in mcp-launchers/ with #!/usr/bin/env bash and . /root/.env (not source).

MCP 11/13 connected, meyhem/github still loading

Ensure disabled: true on legacy servers in mcp.json. Start fresh session: /new.

Health Verification

for p in 8088 8081 18082 18083 7071 3001; do
  curl -sf "http://127.0.0.1:$p/health" >/dev/null && echo ":$p OK" || echo ":$p FAIL"
done
kimi doctor

Escalation

| Condition | Action | |-----------|--------| | OAuth revoked | /login in Kimi TUI | | A-FORGE stdio fails | cd /root/A-FORGE && npm run build then retry | | Cross-repo architecture change | 888_HOLD → Arif |

DITEMPA BUKAN DIBERI.

ariffazil/FORGE-kimi-code

skills/ARCHIVE-dupe-2026-07-12/root_.agents_skills/FORGE-kimi-code/SKILL.md

Configure, audit, and align Kimi Code CLI as AAA warga FI-008 with arifOS kernel and A-FORGE stdio actuator.

2 stars

tools

Updated Jul 17, 2026

$ install --global

skillsauth

npx skillsauth add ariffazil/openclaw-workspace FORGE-kimi-code

Install this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.

Security Scan Results

3 of 9 scanners reported clean

Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.

Scanners Passed

Scanners in report

Clean

TrivyContainer and dependency vulnerability scanner

95%

Clean

SemgrepStatic code analysis for vulnerabilities

95%

Clean

mcp-scan (Snyk)Model Context Protocol security validation

95%

Skipped

Snyk (dep)Open source security scanning

50%

Skipped

Socket.devSupply chain security analysis

50%

Skipped

VirusTotalMulti-engine malware detection

50%

Skipped

CrowdStrikeAdvanced threat intelligence

50%

Skipped

OSV-ScannerOpen Source Vulnerability database check

50%

Skipped

OWASP Dep-Check

50%

Last scanned: Jul 17, 2026, 3:32 AM142.0s2 files scanned

SKILL.md

id:: kimi-code-aaa
name:: FORGE-kimi-code
version:: 1.0.0
description:: Configure, audit, and align Kimi Code CLI as AAA warga FI-008 with arifOS
owner:: AAA
risk_tier:: medium
language:: true
math:: false
physics:: false
tools:: []
- 'Repair A-FORGE stdio launcher after `source:: not found`
schema_version:: 1
artifact_hash:: pending
layer:: HEXAGON
autonomy_tier:: T1-T2

Kimi Code AAA Configuration

arifOS-ACT Embedding

Before using this skill on any mutating, irreversible, or high-blast-radius task:

ART — Attune (what is the real task?), Recognize (what class of power?), Test (fit · authority · evidence · blast · reversible).
Kernel — Route to arifOS for F1–F13 judgment if action class is Maker/Messenger/Mutator/Destroyer/Sovereign.
ACT — Apply narrow, Constrain scope, Trace witness, STOP before corruption.
Receipt — Leave evidence of what changed, why, and under whose authority.

When to Use

Kimi Code CLI fails with LLM 404, MCP source: not found, or missing federation tools
Migrating from legacy kimi-cli (uv, v1.47) to kimi-code (v0.18+)
Onboarding Kimi as warga AAA (FI-008)
Auditing mcp.json, config.toml, or KIMI_CODE_HOME drift

When NOT to Use

Do not use to rotate secrets in vault.env without 888_HOLD
Do not enable default_yolo = true for constitutional work
Do not wire A-FORGE HTTP :7071/mcp as primary ingress (single-session SDK limit)

Canonical Paths (af-forge VPS)

Official Docs

Install & first launch: https://platform.kimi.ai/docs/guide/kimi-cli-support
Config files: https://www.kimi.com/code/docs/kimi-code-cli/configuration/config-files.html
MCP: https://moonshotai.github.io/kimi-cli/en/customization/mcp.html
Migrate: kimi migrate (interactive — config only recommended)

Audit Checklist

Binary: which kimi → /usr/local/bin/kimi → exec ~/.kimi-code/bin/kimi
Home: echo $KIMI_CODE_HOME → /root/.arifos/agents/kimi
Doctor: kimi doctor → OK config.toml
Auth: OAuth via /login — never use dead KIMI_API_KEY from vault.env (causes 404)
MCP launchers: All stdio servers use mcp-launchers/*.sh (bash), not inline sh -lc with source
A-FORGE: stdio via aforge.sh — not HTTP for Kimi primary ingress
Serena: arifOS/.serena/project.yml and A-FORGE/.serena/project.yml exist
Warga: config.toml has [agent_identity] citizenship = "warga-aaa"

Fix Patterns

LLM 404 `resource_not_found_error`

Root cause: stale KIMI_API_KEY in environment overrides OAuth.

unset KIMI_API_KEY
kimi login   # or /login in TUI
kimi doctor

Wrapper at /usr/local/bin/kimi already unsets KIMI_API_KEY.

`sh: 35: source: not found`

Root cause: MCP stdio launchers invoked via sh with bash-only source.

Fix: use dedicated bash scripts in mcp-launchers/ with #!/usr/bin/env bash and . /root/.env (not source).

MCP 11/13 connected, meyhem/github still loading

Ensure disabled: true on legacy servers in mcp.json. Start fresh session: /new.

Health Verification

for p in 8088 8081 18082 18083 7071 3001; do
  curl -sf "http://127.0.0.1:$p/health" >/dev/null && echo ":$p OK" || echo ":$p FAIL"
done
kimi doctor

Escalation

DITEMPA BUKAN DIBERI.

Related Skills

ariffazil/openclaw

testing

VerifiedTrustedCommunity

OpenClaw edge agent bridge — operational triage, doctor, restart, and A2A bridge routing for the federation edge (Telegram surface). USE WHEN: "openclaw unhealthy", "gateway down", "edge bot not responding", "a2a bridge disconnected", "watchdog tripped", "openclaw doctor", "openclaw restart". NOT for token/security audit — use FORGE-telegram-audit.

2SKILL.mdUpdated Aug 8, 2026

ariffazil/MiniMax Image Generation

tools

VerifiedTrustedCommunity

Generate images, videos, TTS, voice clone, and music via MiniMax MCP server. Use when user asks to "draw", "generate image", "create picture", "make a photo", "text to image", "image generation".

2SKILL.mdUpdated Aug 8, 2026

ariffazil/MiniMax Image Generation

ariffazil/arifos-constitutional-judge

testing

VerifiedTrustedCommunity

Single load-bearing constitutional-judgment skill. Routes all F1–F13, verdict, hold, seal, scope, authority and floor-check calls through the live arif_judge surface. Replaces 7 overlapping predecessors (arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge).

2SKILL.mdUpdated Aug 8, 2026

ariffazil/arifos-constitutional-judge

ariffazil/FORGE-lsp-pre-edit-gate

development

VerifiedTrustedCommunity

MANDATORY LSP grounding gate BEFORE any code mutation on .ts, .py, .js, .tsx, .jsx files. Forces the agent to read real-time compiler diagnostics and structural project context before editing — eliminating blind guesses and anchoring every mutation in F2 (TRUTH). Routes through arifOS kernel (:8088) for centralized gate logic.

2SKILL.mdUpdated Aug 8, 2026

ariffazil/FORGE-lsp-pre-edit-gate

Download

For Claude Desktop. Download once, then upload the file in the app — no terminal needed.

Need help? View full Cowork setup guide →

Install manually

Choose your platform

# Clone the repo
git clone https://github.com/ariffazil/openclaw-workspace.git

# Copy into Claude Code skills folder (global)
cp -r openclaw-workspace/skills/ARCHIVE-dupe-2026-07-12/root_.agents_skills/FORGE-kimi-code ~/.claude/skills/

Claude Code Skills — official skills path docs.

Repository

ariffazil/openclaw-workspace

2 stars

Compatible with

Claude Code

OpenAI Codex CLI

ChatGPT

Adoption

ariffazil/FORGE-kimi-code

$ install --global

Security Scan Results

SKILL.md

Kimi Code AAA Configuration

arifOS-ACT Embedding

When to Use

When NOT to Use

Canonical Paths (af-forge VPS)

Official Docs

Audit Checklist

Fix Patterns

LLM 404 resource_not_found_error

sh: 35: source: not found

MCP 11/13 connected, meyhem/github still loading

Health Verification

Escalation

Related Skills

ariffazil/openclaw

ariffazil/MiniMax Image Generation

ariffazil/arifos-constitutional-judge

ariffazil/FORGE-lsp-pre-edit-gate

ariffazil/FORGE-kimi-code

$ install --global

Security Scan Results

SKILL.md

Kimi Code AAA Configuration

arifOS-ACT Embedding

When to Use

When NOT to Use

Canonical Paths (af-forge VPS)

Official Docs

Audit Checklist

Fix Patterns

LLM 404 resource_not_found_error

sh: 35: source: not found

MCP 11/13 connected, meyhem/github still loading

Health Verification

Escalation

Related Skills

ariffazil/openclaw

ariffazil/MiniMax Image Generation

ariffazil/arifos-constitutional-judge

ariffazil/FORGE-lsp-pre-edit-gate

LLM 404 `resource_not_found_error`

`sh: 35: source: not found`

LLM 404 `resource_not_found_error`

`sh: 35: source: not found`