Search and filter by type across the catalog
852 results in Memory, Sub-Agents, Infrastructure, Evals · page 30 of 36
Use when teams need facilitation, process optimization, velocity improvement, or agile ceremony management—especially for sprint planning, retrospectives, impediment removal, and scaling agile practices across multiple teams.
Use when you need to find specific information across multiple sources using advanced search strategies, query optimization, and targeted information retrieval. Invoke this agent when the priority is locating precise, relevant results efficiently rather than analyzing or synthesizing content.
Use when you need to find specific information across multiple sources using advanced search strategies, query optimization, and targeted information retrieval. Invoke this agent when the priority is locating precise, relevant results efficiently rather than analyzing or synthesizing content. Specifically:\\n\\n<example>\\nContext: User is looking for academic papers on a narrow topic with specific technical criteria and needs comprehensive coverage across multiple databases.\\nuser: \"I need to find all papers published in the last 3 years about neural network pruning techniques for mobile devices. I need papers from at least 5 different sources.\"\\nassistant: \"I'll use the search-specialist agent to systematically search academic databases, conference proceedings, and preprint servers with optimized queries to ensure comprehensive coverage of this specific topic.\"\\n<commentary>\\nUse search-specialist when the user needs exhaustive information retrieval with multiple sources, specific quality criteria, and emphasis on finding hard-to-locate content. This agent excels at designing search strategies, optimizing queries, and ensuring no relevant information is missed.\\n</commentary>\\n</example>\\n\\n<example>\\nContext: User is building a competitive intelligence report and needs specific market data, financial information, and company announcements from varied sources.\\nuser: \"Find all recent announcements, patents, and financial reports from our three main competitors. I need documents from the past 18 months across public databases, patent offices, and news sources.\"\\nassistant: \"I'll deploy the search-specialist agent to systematically search patent databases, SEC filings, news archives, and company websites with targeted queries to gather comprehensive competitive intelligence.\"\\n<commentary>\\nUse search-specialist when you need to aggregate information from diverse, specialized sources with specific temporal or categorical constraints. The agent's expertise in source selection and query optimization ensures thorough coverage.\\n</commentary>\\n</example>\\n\\n<example>\\nContext: User needs to locate a specific technical specification or documentation that exists but is difficult to find across various repositories and archives.\\nuser: \"I'm looking for the technical specification document for the legacy messaging protocol we deprecated in 2015. It's somewhere in our archives or public documentation sites.\"\\nassistant: \"I'll use the search-specialist agent to systematically search archived documentation, public repositories, and historical snapshots using keyword variations and source-specific search techniques to locate this document.\"\\n<commentary>\\nUse search-specialist when searching for specific, difficult-to-locate information in archives, legacy systems, or scattered across multiple repositories. The agent applies advanced search techniques like reverse searching, citation tracking, and deep web access to find needle-in-haystack information.\\n</commentary>\\n</example>
PROACTIVELY USE this agent when you need to perform comprehensive security analysis on code to identify vulnerabilities, potential attack vectors, and compliance issues. This agent MUST BE USED for any security-sensitive code including authentication, authorization, data handling, API endpoints, and user input processing. Examples: <example>Context: User has just implemented a user authentication system and wants to ensure it's secure before deployment. user: 'I've just finished implementing the login and registration functionality. Can you check if there are any security issues?' assistant: 'I'll use the security-analyzer agent to perform a comprehensive security review of your authentication code.' <commentary>Since the user is requesting security analysis of recently written authentication code, use the security-analyzer agent to identify potential vulnerabilities and security best practices.</commentary></example> <example>Context: User is working on a web API that handles sensitive user data and wants proactive security validation. user: 'Here's my new API endpoint for handling payment information' assistant: 'Let me use the security-analyzer agent to examine this payment handling code for security vulnerabilities.' <commentary>Since the user is sharing code that handles sensitive payment data, use the security-analyzer agent to identify potential security risks and compliance issues.</commentary></example>
PROACTIVELY USE this agent when you need to design comprehensive security frameworks, authentication systems, authorization models, or data protection strategies for applications and systems. This agent MUST BE USED for security architecture and framework design tasks. This includes scenarios requiring compliance with security standards (OWASP, ISO 27001, GDPR, HIPAA), threat modeling, security architecture diagrams, encryption strategies, secure communication protocols, or incident response procedures. Examples: <example>Context: User is building an application that handles sensitive data and needs comprehensive security design. user: 'I'm building a healthcare application that needs to be HIPAA compliant and handle sensitive patient data' assistant: 'I'll use the security-architect agent to design a comprehensive security framework that meets HIPAA compliance requirements.' Since the user needs security architecture design with specific compliance requirements, use the security-architect agent.</example> <example>Context: User is developing a financial application and needs to implement secure authentication. user: 'I need to design a multi-factor authentication system for our banking application' assistant: 'I'll use the security-architect agent to design a robust MFA system that meets financial industry security standards.' Since the user needs security architecture for authentication systems, use the security-architect agent.</example>
Use this agent when conducting comprehensive security audits, compliance assessments, or risk evaluations across systems, infrastructure, and processes. Invoke when you need systematic vulnerability analysis, compliance gap identification, or evidence-based security findings.
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulnerability assessment, threat modeling, secure authentication (OAuth2/OIDC), OWASP standards, cloud security, and security automation. Handles DevSecOps integration, compliance (GDPR/HIPAA/SOC2), and incident response. Use PROACTIVELY for security audits, DevSecOps, or compliance implementation.
Use this agent when implementing comprehensive security solutions across infrastructure, building automated security controls into CI/CD pipelines, or establishing compliance and vulnerability management programs. Invoke for threat modeling, zero-trust architecture design, security automation implementation, and shifting security left into development workflows.
Use this agent when implementing comprehensive security solutions across infrastructure, building automated security controls into CI/CD pipelines, or establishing compliance and vulnerability management programs. Invoke for threat modeling, zero-trust architecture design, security automation implementation, and shifting security left into development workflows. Specifically:\\n\\n<example>\\nContext: A development team is moving to microservices on Kubernetes and needs to implement security across infrastructure, container registries, and the deployment pipeline.\\nuser: \"We're deploying to Kubernetes and need to secure our infrastructure layer. We need container image scanning, network policies, secrets management, and automated compliance checks in our CI/CD pipeline.\"\\nassistant: \"I'll implement comprehensive DevSecOps automation. First, let me understand your current infrastructure and CI/CD setup. Then I'll deploy container image scanning with vulnerability reporting, configure Kubernetes network policies and pod security standards, integrate HashiCorp Vault for secrets management, and add SAST/DAST scanning to your pipeline. I'll ensure CIS Kubernetes benchmark compliance and provide metrics dashboards.\"\\n<commentary>\\nUse security-engineer when building proactive security controls into infrastructure and development pipelines. This agent automates security validation throughout the development lifecycle rather than addressing vulnerabilities reactively.\\n</commentary>\\n</example>\\n\\n<example>\\nContext: A company needs to achieve SOC 2 Type II compliance and has had security incidents due to unpatched systems and missing security controls.\\nuser: \"We need to implement a compliance program for SOC 2. We've had vulnerability breaches before, so we need automated scanning, patch management, audit trails, and evidence collection.\"\\nassistant: \"I'll architect your compliance program with automated evidence collection, vulnerability scanning across infrastructure, patch management automation with verification, and continuous compliance monitoring. I'll implement security scanning in your CI/CD, set up SIEM and log aggregation, create incident response playbooks, and establish audit trails meeting SOC 2 requirements.\"\\n<commentary>\\nInvoke security-engineer when establishing compliance frameworks and vulnerability management programs. This agent designs systems to prevent incidents through automated controls and provides evidence trails for audits.\\n</commentary>\\n</example>\\n\\n<example>\\nContext: An organization needs to modernize its security architecture from perimeter-based security to zero-trust principles.\\nuser: \"Design a zero-trust architecture for our cloud infrastructure. We currently have traditional firewall-based security, but we need identity-based access, micro-segmentation, and continuous verification.\"\\nassistant: \"I'll design and implement zero-trust architecture with identity-based access controls, implement micro-segmentation at network and application layers, set up continuous device and user verification using OIDC/SAML, configure mutual TLS for service communication, and deploy encrypted data protection. I'll provide phased migration strategy, monitoring for policy violations, and incident response automation.\"\\n<commentary>\\nUse security-engineer for architectural security decisions like zero-trust implementation, security automation design, and building systems resilient to breaches. This agent prevents incidents through systematic architectural improvements rather than reactive patching.\\n</commentary>\\n</example>
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulnerability assessment, threat modeling, secure authentication (OAuth2/OIDC), OWASP standards, cloud security, and security automation. Handles DevSecOps integration, compliance (GDPR/HIPAA/SOC2), and incident response. Use PROACTIVELY for security audits, DevSecOps, or compliance implementation.
Use this agent when you need comprehensive code review from a senior fullstack developer perspective, including analysis of code quality, architecture decisions, security vulnerabilities, performance implications, and adherence to best practices. Examples: <example>Context: User has just implemented a new authentication system with JWT tokens and wants a thorough review. user: 'I just finished implementing JWT authentication for our API. Here's the code...' assistant: 'Let me use the senior-code-reviewer agent to provide a comprehensive review of your authentication implementation.' <commentary>Since the user is requesting code review of a significant feature implementation, use the senior-code-reviewer agent to analyze security, architecture, and best practices.</commentary></example> <example>Context: User has completed a database migration script and wants it reviewed before deployment. user: 'Can you review this database migration script before I run it in production?' assistant: 'I'll use the senior-code-reviewer agent to thoroughly examine your migration script for potential issues and best practices.' <commentary>Database migrations are critical and require senior-level review for safety and correctness.</commentary></example>