惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Security Latest
Security Latest
Recorded Future
Recorded Future
人人都是产品经理
人人都是产品经理
S
SegmentFault 最新的问题
Hacker News - Newest:
Hacker News - Newest: "LLM"
C
CXSECURITY Database RSS Feed - CXSecurity.com
博客园 - 三生石上(FineUI控件)
博客园 - 聂微东
P
Privacy & Cybersecurity Law Blog
WordPress大学
WordPress大学
Know Your Adversary
Know Your Adversary
Spread Privacy
Spread Privacy
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
量子位
L
LINUX DO - 热门话题
L
Lohrmann on Cybersecurity
博客园 - Franky
酷 壳 – CoolShell
酷 壳 – CoolShell
T
Tor Project blog
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
雷峰网
雷峰网
阮一峰的网络日志
阮一峰的网络日志
V
Visual Studio Blog
T
Threatpost
T
Tenable Blog
有赞技术团队
有赞技术团队
大猫的无限游戏
大猫的无限游戏
Engineering at Meta
Engineering at Meta
GbyAI
GbyAI
C
Cisco Blogs
H
Heimdal Security Blog
Attack and Defense Labs
Attack and Defense Labs
A
About on SuperTechFans
Last Week in AI
Last Week in AI
N
News and Events Feed by Topic
T
Threat Research - Cisco Blogs
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
I
Intezer
V
V2EX
Cyberwarzone
Cyberwarzone
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
B
Blog RSS Feed
V
Vulnerabilities – Threatpost
N
Netflix TechBlog - Medium
T
The Blog of Author Tim Ferriss
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
U
Unit 42
PCI Perspectives
PCI Perspectives
P
Privacy International News Feed
D
Docker

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
How I Use Kiro: A Teammate, Not an Autopilot
Alvaro Llamojha · 2026-06-01 · via DEV Community

1. Why I use Kiro

I've been using Kiro for almost 1 year now, I'm using it as a Cloud Architect and also to build side projects for fun. The main reason I use Kiro over other tools is how it works with you as an engineer. Over the months, I've noticed certain patterns in how I use Kiro. Let's go over them:

Index

  • 1. Why I use Kiro
  • 2. Pair Programming with Kiro
  • 3. Repeatable workflows as Skills
  • 4. Using Plan, Specs and Agents
  • 5. Council of agents
  • 6. Documentation, Documentation, Documentation
  • Final thoughts

2. Pair Programming with Kiro

Pair Programming with Kiro

The most common way that I use Kiro is in Pair Programming. Pair Programming is when there are 2 developers working together on the same task, they can work in tandem or one of them can be the one guiding/planning while the other one does the code. In my case, with Kiro, I'm the one doing the guiding and planning while Kiro is the one executing and implementing the code.

I'm also using Kiro as my rubber duck. If I have a new idea or I'm working on a blocking bug, I talk to Kiro so it can give me a different point of view, investigate and steer me into good practices.

The main reason for me to do it this way is because once the session is over, I can run a prompt/skill to record everything from the session:

Kiro, summarize this session and save it into a .memory folder with the format yyyymmdd and as a markdown

So then everything that we've done is going to be recorded there.

Do you remember everything that you've done yesterday? Maybe. But what about last week? And what about one month ago? I definitely don't remember it.

In the classic Software Development Life Cycle, we have tickets, and we have a way that we can recall all this information, but the more detailed context of why you did it is going to be completely missed.

Now, with tools like Kiro, this is possible to remember. You just have a .memory folder where you summarize all your sessions. So in the future, we could have a situation like this:

Oh, I don't remember what changes I did in this cluster two months ago, and now my boss is asking about it. Based on the sessions from two months ago, tell me what we did in the cluster sorted by date

And Kiro is going to save my day.

3. Repeatable workflows as Skills

Workflows as Skills

My experience as a DevOps Engineer has taught me to automate everything. Sometimes you will use Kiro to do a repetitive task, like:

  • going into AWS and checking the billing state and budget quotas;

  • do a security check of recent CVE against our codebase and the versions that we use;

  • reviewing all the alerts that happened last week.

These are repetitive things that I do, and they have certain scripts or commands that I'm asking Kiro to do again and again.
We can automate this by recording it as a prompt or skill. With Kiro, I can just say:

Okay, we just did all of this. Now record it as a skill or as a prompt.

So next time that I need to review the billing or review the alerts, I'm just going to ask Kiro:

let's review the alerts, use the skill alerts_review.md

And it's going to read the skill and start doing it as we already designed. And because the first time you did it was working, it helps ensure that Kiro uses the same steps, which makes hallucination or drifting from the main goal less likely.
If it is a repeatable task, record it and make it so you can use it again.

4. Using Plan, Specs and Agents

Plan, Specs and Agents

I usually start a new task following three main steps:

  • First I go into plan mode (CLI built-in), I give the gist of my tasks and together with Kiro, we go into a question-answer session to clarify the goals, gaps and implementation. I personally love this feature, having this back-and-forth feedback helps me not just plan it properly but to make me think through it. Once the plan is over I ask it to write it as a Spec
  • The IDE alternative is to use the built-in Spec features, it will generate a Requirements.md, Design.md and Task.md with breaks after each of them that allow you to read them and verify them. Specs are not only useful for defining the task at hand, but to also have a record of the decisions taken to implement the task.
  • The final step is to make sure that Kiro will use my custom sub-agents. I ask Kiro to review the task list and to optimise it to use sub-agents and parallel executions. I've built a registry for Kiro Context where I have loads of custom agents which are really useful for this case.

I don't go full auto-approve. I like to see what it's actually doing and how it is doing it, which I think Kiro does very well as a tool. It's not a tool that is just going to one-shot and vibe-code your stuff. It's a tool that allows you to see what it's doing, and it's asking for feedback and permissions, which as an engineer, I really appreciate because it keeps me in the loop.

At the end of the task implementation, I do two things:

  • code review, I have a prompt to code review all staged changes and then add them as a TODO list so we can go one-by-one fixing them. I tend to do this also with a different model to get a 'second point of view'.
  • Pre-Mortem, run a scenario where we pretend that the task implementation failed, running like a post-mortem but before it even happens.

5. Council of agents

Council of Agents

While pair programming and the rubber duck method usually work well, sometimes I want to see different points of view or brainstorm some new ideas. For this specific case I build what I call 'The Council of Agents'.

I created a sub-agent for Opus, a sub-agent that is using Sonnet, a sub-agent that is using Haiku, and so on.
Then I have a sub-agent that is going to be the council ruler, which is going to invoke those sub-agents for a specific task.

It works very well because, while they can see similar points, each of them usually sees something different. Then I just pick the best of each of them. Reducing the chance of wild hallucinations.

6. Documentation, Documentation, Documentation

Documentation

Documentation is that thing that we all love but is hard to actually do. When I start working on an existing project I usually go and read all the documentation finding things that are deprecated, not in use anymore and getting an out-of-date version of the system.

The way that I approach this with Kiro is to ask for an analysis of the codebase and generate two main markdown files:

  • A very high-level detail of the logic of this codebase, with simple diagrams in Mermaid.
  • A very deep-level and detailed explanation of the codebase. Architecture diagrams in Mermaid and code snippets.

Once it gets all the information and puts it into those two Markdown files, what I'm going to ask is to create some HTML files so it can display this for me in a way that is easy for me to read. I prefer dark-themed, TLDR at the start and some feedback/gotchas points at the end.

From there, I can go more into detail for the specific things that I want.

Maybe I want to see just diagrams, expand it to drawio format, see how the system interconnects, display snippets of the code, add links for the SDK or documentation for third parties. So depending on what I want to do or what I want to see, I'm going to ask for that and create more documentation.

When I share this documentation I always focus on who is going to be the user target. If it is going to be context documentation for another AI tool to use, then I'll choose Markdown format. If it is going to be a report for other humans to read, then it will be HTML.

Final thoughts

This is how I use Kiro. For me, it's not just about asking an AI tool to write code. It's more about how I can use it in different parts of my workflow.

That is the important part for me. I don't want the tool to just go away and build everything by itself. I want to see what it's doing. I want to give feedback. I want to keep the context. And I want to reuse the things that work. That is why Kiro fits the way I work.

I would love to see how other people are using Kiro or any other AI tool in their day-to-day. Do you use any of the ways that I mentioned? Do you have a way to work with AI that has been working well for you? Please share it in the comments.