Battle-tested skills · hooks · agents — one command, for Kimi Code, Claude Code and Codex CLI.
npx kimi-boost install → pick a preset → done.
Your AI coding agent only knows what you teach it. Without guidance it writes generic, unidiomatic code, pushes straight to main, and runs rm -rf on things you liked. Hand-configuring skills, hooks and agents takes hours — so nobody ever does it.
kimi-boost installs a complete, opinionated development workflow in seconds:
| You get | What it does |
|---|---|
| 🧠 Skills | Best-practice rules your agent auto-loads — no prompting required |
| 🔍 Reviewer agents | Read-only subagents your agent delegates to before committing |
| 🛡️ Hooks | Cross-platform Node guards: dangerous commands, main-branch protection |
| 🔄 One-command updates |
kimi-boost update keeps every preset current, even on forks |
GIF won't load (or you're behind a slow CDN)? Same session, as plain text:
$ kimi-boost install vue3
✓ [kimi] Installed preset 'vue3' into Kimi Code
/Users/you/.kimi-boost/hooks/vue3
config.toml[extra_skill_dirs], config.toml[extra_agent_dirs], config.toml[[hooks]] (+1)
Run /reload or start a new session.
$ kimi-boost doctor
✓ kimi: detected (version 0.36.1)
✓ kimi: config.toml parses
✓ kimi: hook script valid
✓ kimi: mounted dir present
All checks passed.
① Official Kimi Code plugin channel — no CLI required. The five flagship presets are mirrored to single-plugin repos and install natively:
/plugins install https://github.com/shidesheng0218/kimi-boost-vue3
Available mirrors: vue3 · react · go · python · usage
Or browse them inside the /plugins panel via our marketplace feed:
export KIMI_CODE_PLUGIN_MARKETPLACE_URL=https://raw.githubusercontent.com/shidesheng0218/kimi-boost/main/marketplace.json② kimi-boost CLI — all 19 presets, three harnesses. One installer for Kimi Code, Claude Code and Codex CLI, with updates, doctor checks and clean uninstalls:
npx kimi-boost install| Official channel | kimi-boost CLI | |
|---|---|---|
| Presets | 5 flagship (mirrored) | All 19 |
| Harnesses | Kimi Code | Kimi Code · Claude Code · Codex |
| Needs | Just Kimi Code | Node.js |
| Extras | — | update · doctor · usage stats · dry-run |
| Preset | Stack | Reviewer agent | Hooks | Official repo |
|---|---|---|---|---|
vue3 |
Vue 3 + TypeScript | vue3-reviewer |
🛡️ main-branch guard | ✅ kimi-boost-vue3 |
react |
React + TypeScript | react-reviewer |
🛡️ main-branch guard | ✅ kimi-boost-react |
go |
Go | go-reviewer |
🛡️ main-branch guard | ✅ kimi-boost-go |
python |
Python | python-reviewer |
🛡️ dangerous-shell blocker | ✅ kimi-boost-python |
nextjs |
Next.js (fullstack) | nextjs-reviewer |
🛡️ main-branch guard | via CLI |
react-native |
React Native | react-native-reviewer |
🛡️ main-branch guard | via CLI |
flutter |
Flutter / Dart | flutter-reviewer |
🛡️ main-branch guard | via CLI |
uniapp |
uni-app (cross-platform) | uniapp-reviewer |
🛡️ main-branch guard | via CLI |
weapp |
WeChat Mini Program | weapp-reviewer |
— | via CLI |
nestjs |
NestJS / TypeScript backend | nestjs-reviewer |
🛡️ main-branch guard | via CLI |
express |
Express (Node.js) | express-reviewer |
🛡️ main-branch guard | via CLI |
fastapi |
FastAPI (Python) | fastapi-reviewer |
🛡️ main-branch guard | via CLI |
rust |
Rust | rust-reviewer |
🛡️ main-branch guard | via CLI |
java |
Java (Spring Boot) | java-reviewer |
🛡️ main-branch guard | via CLI |
Special presets:
| Preset | What it gives you | Official repo |
|---|---|---|
usage |
Tracks sessions / prompts / tool calls into ~/.kimi-boost/usage.json; daily limit hint via KIMI_BOOST_DAILY_LIMIT; view with kimi-boost stats
|
✅ kimi-boost-usage |
core |
The baseline insurance every project should have — blocks direct pushes to main/master, dangerous shell commands (rm -rf /, mkfs, dd to disk, curl|sh), and hardcoded secrets in written files. Included by default in kimi-boost init
|
via CLI (default in init) |
mcp-tools |
Zero-config MCP servers: fetch (web scraping) + time (timezones) — written to ~/.kimi-code/mcp.json
|
via CLI |
security |
Cross-stack guard: scans Write/Edit for hardcoded secrets, blocks dangerous git push (--force/--delete, allows --force-with-lease); plus a security-reviewer agent |
via CLI |
git-workflow |
Conventional commits, branch naming & PR discipline (auto-loaded skill) + a git-workflow-reviewer agent; no hooks |
via CLI |
Every preset bundles a best-practice SKILL.md (auto-loaded) + a reviewer agent. New stacks are vote-driven — issue #1. "via CLI" presets get their own official repo as demand grows.
Each preset is one directory in this repo — a valid kimi.plugin.json plugin AND a kimi-boost preset. Contributions welcome:
presets/<id>/
├── preset.json # kimi-boost metadata
├── kimi.plugin.json # Kimi Code plugin manifest (native marketplace form)
├── skills/<name>/SKILL.md
├── agents/<name>-reviewer.md
└── hooks/<name>.mjs # cross-platform Node, fail-open by design
| Command | What it does |
|---|---|
kimi-boost install [preset] |
Install a preset by id — or from any GitHub repo: install github:owner/repo (--dry-run preview, --with-hooks force, --project install into current project) |
kimi-boost init |
Detect this project's stack and install matching presets — always includes the core guardrails by default (--yes skip prompt, --dry-run preview, --project) |
kimi-boost list |
Show available + installed presets |
kimi-boost remove <preset> |
Uninstall cleanly |
kimi-boost update [--repo owner/repo] |
Pull latest versions and re-apply (works on forks; community presets update from their source repo) |
kimi-boost update --dry-run |
Preview what an update would change (version + file-level diff) without writing |
kimi-boost outdated [--project] [--json] |
Show installed presets with newer registry versions |
kimi-boost doctor [--fix] |
Diagnose config, hooks, mounted dirs, manifest consistency, duplicate hooks |
kimi-boost guard |
Guardrail status + block history; guard --log, --disable/--enable <name>, --add-pattern <regex> — tune guards live, no reinstall |
kimi-boost marketplace [--source-mode repo|zip] |
Generate a Kimi Code custom marketplace JSON |
kimi-boost stats [-d N] [--share] |
Usage report with bar chart, streak & top tools; --share exports an SVG card (alias: usage) |
kimi-boost badge [preset] |
Print a README badge (markdown) showing this project uses kimi-boost |
kimi-boost export [file] |
Export your preset setup to a shareable file (--embed-content for offline restore, --include-usage) |
kimi-boost import <file> |
Restore a previously exported setup on another machine (--yes, --dry-run) |
kimi-boost validate <dir> |
Validate a preset directory (for preset authors) |
kimi-boost dev <dir> |
Validate + preview-install a local preset (dry-run) |
kimi-boost package <dir> |
Validate + pack a preset into <id>-<version>.zip
|
kimi-boost status |
Detect installed CLIs & platform |
kimi-boost bootstrap [--makefile] |
Generate a setup.sh (or Makefile setup target) for team onboarding |
kimi-boost update --check |
Check for preset updates without installing; notifies + exits non-zero if found |
kimi-boost update --watch [--interval h] [--uninstall] |
Register/remove a periodic background update check |
kimi-boost install <preset> --project writes the preset into the current project instead of your user config:
- skills →
.agents/skills/(Kimi Code + the cross-tool.agents/convention) and.claude/skills/ - agents →
.agents/agents/and.claude/agents/ - hooks →
.claude/settings.json(Claude Code only — Kimi Code has no project-level hook mechanism; Codex is skipped)
Everything lands inside the project root (nearest .git ancestor), so you can commit the preset and share it with your team — every clone gets the same AI behavior. Remove with kimi-boost remove <preset> --project.
Anyone can publish a preset as a plain GitHub repo (a preset.json at the repo root, plus skills/, agents/, hooks/):
kimi-boost install github:owner/repo # or the full https://github.com/owner/repo URL
kimi-boost install github:owner/repo@v1.2.0 # pin a branch or tagkimi-boost shows you exactly what the preset will register — especially its hooks, which execute when the agent runs — and asks for confirmation before installing (--yes to skip in scripts, --dry-run to preview). Community presets are tracked in update / outdated against their source repo, so they stay current. Only install presets from authors you trust — hooks run shell commands with your agent's permissions.
The usage preset quietly counts your sessions / prompts / tool calls. stats turns it into a report you'll want to screenshot:
$ kimi-boost stats -d 7
📊 kimi-boost stats · last 7 days
128 prompts · 12 sessions · 856 tool calls · 5 active days · streak 3 🔥
09-01 ████████████ 24
09-02 ██████ 12
...
$ kimi-boost stats --share # → kimi-boost-stats.svg--share exports a self-contained SVG card (no server, no upload — your data never leaves your machine). Post it, or embed it in your README next to a kimi-boost badge.
Most "agent safety" is invisible — a hook silently blocks something and you never know your agent almost ran rm -rf /. kimi-boost makes the seatbelt visible:
- Every blocked action is logged to
~/.kimi-boost/guard-log.jsonl(secret previews are redacted — never the secret itself). -
kimi-boost guardshows every guard's status and how many times it fired;guard --loglists recent blocks with timestamps. -
kimi-boost statsreports🛡️ N blocks— your share card can now say "it stopped my agent N times this week." - Tune live without reinstalling:
guard --disable <name>/--enable <name>, or teachblock-dangerousyour own patterns withguard --add-pattern <regex>.
The core preset now also shields credential files (~/.ssh, ~/.aws/credentials, *.pem…) from being read into the model's context, and blocks workspace-destroying git ops (reset --hard, clean -f, checkout -- .).
export captures your whole kimi-boost setup — installed presets with versions, community preset sources, and the background update check — into one shareable file:
kimi-boost export # → kimi-boost-export.json
kimi-boost export --embed-content # → .tar.gz with preset contents (exact, offline)
kimi-boost export --include-usage # also carry your usage history
# on the new machine:
kimi-boost import kimi-boost-export.json # shows the plan, asks once, restores everything
kimi-boost import kimi-boost-export.json --dry-runOfficial presets reinstall from the registry, community presets reinstall from their exact repo@ref source, and the update watch is re-registered. Commit the file to your dotfiles repo, or drop it in your team's chat — one file, same AI workflow everywhere.
Building a community preset? Three helpers cover the loop:
kimi-boost validate ./my-preset # schema, hooks, skills, plugin manifest
kimi-boost dev ./my-preset # validate + preview the install (dry-run)
kimi-boost package ./my-preset # validate + pack my-preset-1.0.0.zipPush the directory to a GitHub repo (with preset.json at its root) and anyone can install it with kimi-boost install github:you/my-preset.
$ kimi-boost doctor
✓ kimi: detected
version 0.36.1
✓ kimi: config.toml parses
✓ kimi: hook script valid
/Users/you/.kimi-boost/hooks/vue3/protect-main.mjs
✓ kimi: mounted dir present
⚠ codex: CLI not detected
Install codex or ignore if you don't use it.
1 warning(s), no errorskimi-boost doctor --fix restores missing mounted dirs and hook scripts automatically.
flowchart TD
REG["<b>presets/ registry</b> (19 presets)<br/>skills · agents · hooks · mcp"]
subgraph CI["Monorepo CI"]
VERIFY["verify.yml<br/>live-installs every preset<br/>into a real Kimi Code CLI"]
SPLIT["split-presets.yml<br/>git subtree mirror"]
end
REG --> CI
SPLIT -->|"auto-mirror"| M1["kimi-boost-vue3"]
SPLIT -->|"auto-mirror"| M2["react · go · python · usage"]
M1 & M2 -->|"/plugins install"| KP["Kimi Code /plugins"]
REG -->|"builds (repo sources)"| MKT["marketplace.json"]
MKT -->|"KIMI_CODE_PLUGIN_MARKETPLACE_URL"| KP
KB["<b>kimi-boost CLI</b><br/><i>install · remove · doctor · update</i>"]
REG --> KB
KB -->|"text-level edit"| KCF["~/.kimi-code/config.toml"]
KB -->|"manifest-driven"| CCS["~/.claude/settings.json"]
KB -->|"manifest-driven"| CXC["~/.codex/config.toml"]
classDef cli fill:#7c3aed,color:#fff,font-weight:bold;
classDef tool fill:#1e293b,color:#e2e8f0;
classDef out fill:#064e3b,color:#a7f3d0;
class KB,REG cli;
class M1,M2,MKT tool;
class KCF,CCS,CXC,KP out;
- Single source of truth — presets live in this monorepo; the five flagship mirrors are read-only CI artifacts, re-synced on every push.
-
Kimi Code — the CLI edits
~/.kimi-code/config.tomlat text level (a managed# >>> kimi-boost managed >>>block plus in-place array merge). Your comments and formatting survive untouched. -
Claude Code & Codex — manifest-driven install into
~/.claude/~/.codex; agent files use the native frontmatter format (cross-compatible, per Kimi docs). -
Hooks are plain Node
.mjs— the same pattern Kimi Code's own docs use, identical behavior on macOS / Windows / Linux. - Compatibility is tested, not assumed — CI live-installs all 19 presets into a real Kimi Code CLI on every PR, and weekly against upstream drift.
- 🔒 Never touches your config beyond its own managed section — comments, ordering, formatting all preserved
- 🗄️ Backed up to
<config>.kboost.bakbefore every change - 🚧 Managed-roots whitelist — refuses to delete anything outside
~/.kimi-boost,~/.kimi-code,~/.claude,~/.codex - 🛡️ Dual-channel guard — already installed via Kimi
/plugins? No duplicate hooks. - ♻️ Content-aware hook dedup — presets bundling the same guard script (e.g.
protect-main.mjs) share a single config entry; uninstalling one preset retargets the entry to the next owner instead of breaking the rest.doctorflags redundant or diverging hook copies. - ⚡ Fail-open hooks — a crashing hook never blocks your work (exit
0allow · exit2block)
- MCP server presets
- Token/cost usage guard hooks
- Official-channel distribution (single-plugin repo mirrors)
-
Per-project (
.kimi-boost/) presets - More stack presets (vote in issue #1)
- Mirror every preset to its own official repo
Preset catalog is PR-driven: add a directory under presets/, CI validates schema, hook events and file existence — then live-installs your preset into a real Kimi Code CLI. See CONTRIBUTING.md.
MIT
