Search and filter by type across the catalog
950 results in Sub-Agents, Infrastructure, Hooks, Evals · page 25 of 40
Verify an open-source fork is fully sanitized before release. Scans for leaked secrets, PII, internal references, and dangerous files using 20+ regex patterns. Generates a PASS/FAIL/PASS-WITH-WARNINGS report. Second stage of the opensource-pipeline skill. Use PROACTIVELY before any public release.
Use this agent when implementing payment systems, integrating payment gateways, or handling financial transactions that require PCI compliance, fraud prevention, and secure transaction processing. Specifically:\\n\\n<example>\\nContext: An e-commerce platform needs to integrate a payment gateway to accept credit cards, manage subscriptions, and handle refunds with PCI compliance.\\nuser: \"We need to integrate Stripe for payments. We have subscription tiers, need to handle refunds, and must be PCI compliant. What's the best approach?\"\\nassistant: \"I'll design a complete payment integration. First, let me query the context manager for your business model and transaction volumes. Then I'll implement tokenization to avoid storing card data, set up webhook handlers for subscription events, implement proper error handling with retries, and ensure PCI DSS compliance through secure token vaults. I'll include comprehensive testing and audit logging.\"\\n<commentary>\\nInvoke payment-integration when building a complete payment system from scratch that requires gateway integration, compliance, and secure transaction flows. This agent handles architecture, security, and all payment-specific concerns.\\n</commentary>\\n</example>\\n\\n<example>\\nContext: A SaaS platform has an existing payment system but needs to add multi-currency support, handle currency conversion, and optimize fees across different payment methods.\\nuser: \"Our payment system only works in USD. We want to expand globally with multi-currency support and optimized routing to minimize payment processing fees.\"\\nassistant: \"I'll implement multi-currency support with exchange rate management, set up intelligent gateway routing to optimize fees per currency, implement proper settlement currency handling, and add currency conversion with fraud checks. I'll configure compliance rules for different regions and set up reporting to track currency-specific metrics.\"\\n<commentary>\\nUse payment-integration when enhancing existing payment systems with new features like multi-currency support, alternative payment methods, or optimization for cost and reliability.\\n</commentary>\\n</example>\\n\\n<example>\\nContext: A payments team discovered fraudulent transactions and wants to strengthen fraud detection without blocking legitimate transactions.\\nuser: \"We're seeing a spike in chargebacks from our payment processing. How do we implement better fraud detection?\"\\nassistant: \"I'll implement layered fraud prevention: velocity checks to detect unusual patterns, address verification (AVV) for card validation, 3D Secure for authentication, and machine learning risk scoring. I'll configure dunning management for failed payments and set up manual review workflows for high-risk transactions. I'll balance security with conversion by tuning detection thresholds.\"\\n<commentary>\\nInvoke payment-integration when you need to add or improve fraud prevention, handle disputes and chargebacks, or strengthen transaction security without negatively impacting legitimate customers.\\n</commentary>\\n</example>
Use this agent when you need to conduct authorized security penetration tests to identify real vulnerabilities through active exploitation and validation. Use penetration-tester for offensive security testing, vulnerability exploitation, and hands-on risk demonstration.
Monitor bundle size and Core Web Vitals metrics during development, blocking deployments that exceed performance budgets with detailed reports. Automatically analyzes Next.js build output, checks bundle sizes against predefined budgets, and provides optimization recommendations. Hook triggers on PostToolUse for build-related operations and file changes that could affect performance.
Performance analysis and optimization specialist. Use PROACTIVELY for identifying bottlenecks, optimizing slow code, reducing bundle sizes, and improving runtime performance. Profiling, memory leaks, render optimization, and algorithmic improvements.
Expert performance engineer specializing in modern observability, application optimization, and scalable system performance. Masters OpenTelemetry, distributed tracing, load testing, multi-tier caching, Core Web Vitals, and performance monitoring. Handles end-to-end optimization, real user monitoring, and scalability patterns. Use PROACTIVELY for performance optimization, observability, or scalability challenges.
Master AI-powered test automation with modern frameworks, self-healing tests, and comprehensive quality engineering. Build scalable testing strategies with advanced CI/CD integration. Use PROACTIVELY for testing automation or quality assurance.
Use this agent when working with PHP 8.3+ projects that require strict typing, modern language features, and enterprise framework expertise (Laravel or Symfony). Use when building scalable applications, optimizing performance, or requiring async/Fiber patterns.
Planning gate that warns when editing production code without an approved specification. Checks for recent .spec.md files in the project directory (last 14 days). If no spec is found, shows a warning suggesting to create one first. Non-blocking (exit 0) — acts as a reminder, not a hard gate. Supports 16 programming languages. Part of the Spec-Driven Development (SDD) methodology where every implementation should be backed by an approved specification.
Expert planning specialist for complex features and refactoring. Use PROACTIVELY when users request feature implementation, architectural changes, or complex refactoring. Automatically activated for planning tasks.