Live survey286 models · 13 providers · 19,992 auditsAudited verification-before-completion · SAFE →What changedHow we verifyllms.txt

Agent skill · Audited from source

Kandev Team

skill · kdlbs/kandevAGPL-3.0 licenceAudited 18 Oct 2026 · source 786d4817799e

★ 972pushed today
!CAUTIONGrade B · 89/100 · 8 findings · 786d481
972repo stars · whole kdlbs/kandev
InstallView source on GitHub ↗

Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit 786d4817799e and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 8 findings, 0 critical or high. What it does: AI Kanban & Development Environment. Orchestrate multiple agents, review changes, open PRs. Multi-provider, self-hostable, no telemetry.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
CoCopilotAIGoogle AI Mode
Cite

Cite this page

ModelsAtlas. “Kandev Team (kdlbs/kandev)”. Retrieved 18 Oct 2026. https://modelsatlas.com/skills/kdlbs/kandev-team

Trust audit

Audit 0.4.1 · source read 18 Oct 2026

Trust score89/100!CAUTION B
0 critical0 high3 medium4 low1 info

CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityWARN6
L1 Static sourceSecrets, path traversal, supply chain, hidden codePASS1
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourceWARN1
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (8)

MEDIUMInventory / provenanceskill.no_skill_md
F-13 Inventory / provenanceCWE-1104Layer L3
Why
no SKILL.md at the audited path
Fix
a skill without its instruction file cannot be reviewed as one
LOWFilesystem / pathfs.traversal · apps/web/e2e/tests/system/licenses-page.spec.ts:1
F-05 Filesystem / pathCWE-22 · CWE-59Layer L1
import { test, expect } from "../../fixtures/test-base";
Why
No further detail recorded for this rule.
Fix
—
INFOInventory / provenanceinv.oversize · apps/web/generated/licenses.json
F-13 Inventory / provenanceCWE-1104Layer L0
apps/web/generated/licenses.json
Why
1506638 bytes not read
Fix
—

Audit 0.4.1 · source sha 786d4817799e · 18 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherkdlbs GitHub organizationOwner of the repository this skill is read from
  • Source folderkdlbs/kandev/apps/backend/internal/office/configloader/skills/kandev-teamThe exact folder we audited
  • LicenceAGPL-3.0As the repository states it
  • Commit pinned for this verdict786d4817799eA new audit runs when the source changes
  • Repository statusNot archivedPushed today
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

We did not capture a SKILL.md for this skill, so there is no instruction text to quote here.

Install

Pinned to the audited commit 786d481

Download folder ↗
git clone https://github.com/kdlbs/kandev
git -C kandev checkout 786d4817799e

The author documents no install command, so this uses the repository directly. Our verdict covers commit 786d4817799e only.

Works in

The author has not said which agents this skill supports, and we have not tested it in any.

Audit history

Every audit, every source change

  1. !CAUTION B 89 / 100

    first audit · source 786d4817799e

Similar skills

All coding & review skills →
Acp Debug!CAUTION

kdlbs/kandev

Debug an ACP agent CLI by spawning it, speaking raw JSON-RPC, and capturing every frame to a JSONL file. Use when the user asks to probe an agent's capabilities, compare agents, test a prompt against an agent, inspect…

★ 972Grade B
Add Integration!CAUTION

kdlbs/kandev

Add a new third-party integration (Jira/Linear-style) — per-workspace credentials, 90s auth-health poller, settings page, link/import buttons. Use when scaffolding a new external service integration.

★ 972Grade B
Clean Branches!CAUTION

kdlbs/kandev

Delete local branches whose remote has been deleted ([gone]), including their worktrees. Use for branch cleanup after merging PRs.

★ 972Grade B
Code Review!CAUTION

kdlbs/kandev

Review changed code for quality, security, and architecture compliance. Use only when the user explicitly requests local review or a PR finding requires it.

★ 972Grade B
Commit!CAUTION

kdlbs/kandev

Stage and commit changes using Conventional Commits. Use when there are dirty/staged files to commit, the user says "commit", or before pushing a PR.

★ 972Grade B
Debug Instance!CAUTION

kdlbs/kandev

AI Kanban & Development Environment. Orchestrate multiple agents, review changes, open PRs. Multi-provider, self-hostable, no telemetry.

★ 972Grade B

Questions about Kandev Team

What does the Kandev Team skill do?
AI Kanban & Development Environment. Orchestrate multiple agents, review changes, open PRs. Multi-provider, self-hostable, no telemetry.
Is Kandev Team safe to install?
With care. The audit graded it B (89/100) and found 8 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can Kandev Team access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (786d4817799e), read on 2026-10-18. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.