Browse
Search and filter by type across the catalog
930 results in Identity, Sub-Agents, Observability, Hooks · page 32 of 39
security-analyzer
PROACTIVELY USE this agent when you need to perform comprehensive security analysis on code to identify vulnerabilities, potential attack vectors, and compliance issues. This agent MUST BE USED for any security-sensitive code including authentication, authorization, data handling, API endpoints, and user input processing. Examples: <example>Context: User has just implemented a user authentication system and wants to ensure it's secure before deployment. user: 'I've just finished implementing the login and registration functionality. Can you check if there are any security issues?' assistant: 'I'll use the security-analyzer agent to perform a comprehensive security review of your authentication code.' <commentary>Since the user is requesting security analysis of recently written authentication code, use the security-analyzer agent to identify potential vulnerabilities and security best practices.</commentary></example> <example>Context: User is working on a web API that handles sensitive user data and wants proactive security validation. user: 'Here's my new API endpoint for handling payment information' assistant: 'Let me use the security-analyzer agent to examine this payment handling code for security vulnerabilities.' <commentary>Since the user is sharing code that handles sensitive payment data, use the security-analyzer agent to identify potential security risks and compliance issues.</commentary></example>
security-architect
PROACTIVELY USE this agent when you need to design comprehensive security frameworks, authentication systems, authorization models, or data protection strategies for applications and systems. This agent MUST BE USED for security architecture and framework design tasks. This includes scenarios requiring compliance with security standards (OWASP, ISO 27001, GDPR, HIPAA), threat modeling, security architecture diagrams, encryption strategies, secure communication protocols, or incident response procedures. Examples: <example>Context: User is building an application that handles sensitive data and needs comprehensive security design. user: 'I'm building a healthcare application that needs to be HIPAA compliant and handle sensitive patient data' assistant: 'I'll use the security-architect agent to design a comprehensive security framework that meets HIPAA compliance requirements.' Since the user needs security architecture design with specific compliance requirements, use the security-architect agent.</example> <example>Context: User is developing a financial application and needs to implement secure authentication. user: 'I need to design a multi-factor authentication system for our banking application' assistant: 'I'll use the security-architect agent to design a robust MFA system that meets financial industry security standards.' Since the user needs security architecture for authentication systems, use the security-architect agent.</example>
security-auditor
Use this agent when conducting comprehensive security audits, compliance assessments, or risk evaluations across systems, infrastructure, and processes. Invoke when you need systematic vulnerability analysis, compliance gap identification, or evidence-based security findings.
security-compliance-security-auditor
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulnerability assessment, threat modeling, secure authentication (OAuth2/OIDC), OWASP standards, cloud security, and security automation. Handles DevSecOps integration, compliance (GDPR/HIPAA/SOC2), and incident response. Use PROACTIVELY for security audits, DevSecOps, or compliance implementation.
security-engineer
Use this agent when implementing comprehensive security solutions across infrastructure, building automated security controls into CI/CD pipelines, or establishing compliance and vulnerability management programs. Invoke for threat modeling, zero-trust architecture design, security automation implementation, and shifting security left into development workflows.
security-engineer-2
Use this agent when implementing comprehensive security solutions across infrastructure, building automated security controls into CI/CD pipelines, or establishing compliance and vulnerability management programs. Invoke for threat modeling, zero-trust architecture design, security automation implementation, and shifting security left into development workflows. Specifically:\\n\\n<example>\\nContext: A development team is moving to microservices on Kubernetes and needs to implement security across infrastructure, container registries, and the deployment pipeline.\\nuser: \"We're deploying to Kubernetes and need to secure our infrastructure layer. We need container image scanning, network policies, secrets management, and automated compliance checks in our CI/CD pipeline.\"\\nassistant: \"I'll implement comprehensive DevSecOps automation. First, let me understand your current infrastructure and CI/CD setup. Then I'll deploy container image scanning with vulnerability reporting, configure Kubernetes network policies and pod security standards, integrate HashiCorp Vault for secrets management, and add SAST/DAST scanning to your pipeline. I'll ensure CIS Kubernetes benchmark compliance and provide metrics dashboards.\"\\n<commentary>\\nUse security-engineer when building proactive security controls into infrastructure and development pipelines. This agent automates security validation throughout the development lifecycle rather than addressing vulnerabilities reactively.\\n</commentary>\\n</example>\\n\\n<example>\\nContext: A company needs to achieve SOC 2 Type II compliance and has had security incidents due to unpatched systems and missing security controls.\\nuser: \"We need to implement a compliance program for SOC 2. We've had vulnerability breaches before, so we need automated scanning, patch management, audit trails, and evidence collection.\"\\nassistant: \"I'll architect your compliance program with automated evidence collection, vulnerability scanning across infrastructure, patch management automation with verification, and continuous compliance monitoring. I'll implement security scanning in your CI/CD, set up SIEM and log aggregation, create incident response playbooks, and establish audit trails meeting SOC 2 requirements.\"\\n<commentary>\\nInvoke security-engineer when establishing compliance frameworks and vulnerability management programs. This agent designs systems to prevent incidents through automated controls and provides evidence trails for audits.\\n</commentary>\\n</example>\\n\\n<example>\\nContext: An organization needs to modernize its security architecture from perimeter-based security to zero-trust principles.\\nuser: \"Design a zero-trust architecture for our cloud infrastructure. We currently have traditional firewall-based security, but we need identity-based access, micro-segmentation, and continuous verification.\"\\nassistant: \"I'll design and implement zero-trust architecture with identity-based access controls, implement micro-segmentation at network and application layers, set up continuous device and user verification using OIDC/SAML, configure mutual TLS for service communication, and deploy encrypted data protection. I'll provide phased migration strategy, monitoring for policy violations, and incident response automation.\"\\n<commentary>\\nUse security-engineer for architectural security decisions like zero-trust implementation, security automation design, and building systems resilient to breaches. This agent prevents incidents through systematic architectural improvements rather than reactive patching.\\n</commentary>\\n</example>
security-scanning-security-auditor
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulnerability assessment, threat modeling, secure authentication (OAuth2/OIDC), OWASP standards, cloud security, and security automation. Handles DevSecOps integration, compliance (GDPR/HIPAA/SOC2), and incident response. Use PROACTIVELY for security audits, DevSecOps, or compliance implementation.
senior-code-reviewer
Use this agent when you need comprehensive code review from a senior fullstack developer perspective, including analysis of code quality, architecture decisions, security vulnerabilities, performance implications, and adherence to best practices. Examples: <example>Context: User has just implemented a new authentication system with JWT tokens and wants a thorough review. user: 'I just finished implementing JWT authentication for our API. Here's the code...' assistant: 'Let me use the senior-code-reviewer agent to provide a comprehensive review of your authentication implementation.' <commentary>Since the user is requesting code review of a significant feature implementation, use the senior-code-reviewer agent to analyze security, architecture, and best practices.</commentary></example> <example>Context: User has completed a database migration script and wants it reviewed before deployment. user: 'Can you review this database migration script before I run it in production?' assistant: 'I'll use the senior-code-reviewer agent to thoroughly examine your migration script for potential issues and best practices.' <commentary>Database migrations are critical and require senior-level review for safety and correctness.</commentary></example>
seo-specialist
SEO specialist for technical SEO audits, on-page optimization, structured data, Core Web Vitals, and content/keyword mapping. Use for site audits, meta tag reviews, schema markup, sitemap and robots issues, and SEO remediation plans.