Browse
Search and filter by type across the catalog
1,219 results in CLAUDE.md / Rules, Sub-Agents, Observability · page 41 of 51
security-engineer
Use this agent when implementing comprehensive security solutions across infrastructure, building automated security controls into CI/CD pipelines, or establishing compliance and vulnerability management programs. Invoke for threat modeling, zero-trust architecture design, security automation implementation, and shifting security left into development workflows.
security-engineer-2
Use this agent when implementing comprehensive security solutions across infrastructure, building automated security controls into CI/CD pipelines, or establishing compliance and vulnerability management programs. Invoke for threat modeling, zero-trust architecture design, security automation implementation, and shifting security left into development workflows. Specifically:\\n\\n<example>\\nContext: A development team is moving to microservices on Kubernetes and needs to implement security across infrastructure, container registries, and the deployment pipeline.\\nuser: \"We're deploying to Kubernetes and need to secure our infrastructure layer. We need container image scanning, network policies, secrets management, and automated compliance checks in our CI/CD pipeline.\"\\nassistant: \"I'll implement comprehensive DevSecOps automation. First, let me understand your current infrastructure and CI/CD setup. Then I'll deploy container image scanning with vulnerability reporting, configure Kubernetes network policies and pod security standards, integrate HashiCorp Vault for secrets management, and add SAST/DAST scanning to your pipeline. I'll ensure CIS Kubernetes benchmark compliance and provide metrics dashboards.\"\\n<commentary>\\nUse security-engineer when building proactive security controls into infrastructure and development pipelines. This agent automates security validation throughout the development lifecycle rather than addressing vulnerabilities reactively.\\n</commentary>\\n</example>\\n\\n<example>\\nContext: A company needs to achieve SOC 2 Type II compliance and has had security incidents due to unpatched systems and missing security controls.\\nuser: \"We need to implement a compliance program for SOC 2. We've had vulnerability breaches before, so we need automated scanning, patch management, audit trails, and evidence collection.\"\\nassistant: \"I'll architect your compliance program with automated evidence collection, vulnerability scanning across infrastructure, patch management automation with verification, and continuous compliance monitoring. I'll implement security scanning in your CI/CD, set up SIEM and log aggregation, create incident response playbooks, and establish audit trails meeting SOC 2 requirements.\"\\n<commentary>\\nInvoke security-engineer when establishing compliance frameworks and vulnerability management programs. This agent designs systems to prevent incidents through automated controls and provides evidence trails for audits.\\n</commentary>\\n</example>\\n\\n<example>\\nContext: An organization needs to modernize its security architecture from perimeter-based security to zero-trust principles.\\nuser: \"Design a zero-trust architecture for our cloud infrastructure. We currently have traditional firewall-based security, but we need identity-based access, micro-segmentation, and continuous verification.\"\\nassistant: \"I'll design and implement zero-trust architecture with identity-based access controls, implement micro-segmentation at network and application layers, set up continuous device and user verification using OIDC/SAML, configure mutual TLS for service communication, and deploy encrypted data protection. I'll provide phased migration strategy, monitoring for policy violations, and incident response automation.\"\\n<commentary>\\nUse security-engineer for architectural security decisions like zero-trust implementation, security automation design, and building systems resilient to breaches. This agent prevents incidents through systematic architectural improvements rather than reactive patching.\\n</commentary>\\n</example>
security-scanning-security-auditor
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulnerability assessment, threat modeling, secure authentication (OAuth2/OIDC), OWASP standards, cloud security, and security automation. Handles DevSecOps integration, compliance (GDPR/HIPAA/SOC2), and incident response. Use PROACTIVELY for security audits, DevSecOps, or compliance implementation.
senior-code-reviewer
Use this agent when you need comprehensive code review from a senior fullstack developer perspective, including analysis of code quality, architecture decisions, security vulnerabilities, performance implications, and adherence to best practices. Examples: <example>Context: User has just implemented a new authentication system with JWT tokens and wants a thorough review. user: 'I just finished implementing JWT authentication for our API. Here's the code...' assistant: 'Let me use the senior-code-reviewer agent to provide a comprehensive review of your authentication implementation.' <commentary>Since the user is requesting code review of a significant feature implementation, use the senior-code-reviewer agent to analyze security, architecture, and best practices.</commentary></example> <example>Context: User has completed a database migration script and wants it reviewed before deployment. user: 'Can you review this database migration script before I run it in production?' assistant: 'I'll use the senior-code-reviewer agent to thoroughly examine your migration script for potential issues and best practices.' <commentary>Database migrations are critical and require senior-level review for safety and correctness.</commentary></example>
seo-specialist
SEO specialist for technical SEO audits, on-page optimization, structured data, Core Web Vitals, and content/keyword mapping. Use for site audits, meta tag reviews, schema markup, sitemap and robots issues, and SEO remediation plans.
seo-structure-architect
Analyzes and optimizes content structure including header hierarchy, suggests schema markup, and internal linking opportunities. Creates search-friendly content organization. Use PROACTIVELY for content structuring.
service-mesh-expert
Expert service mesh architect specializing in Istio, Linkerd, and cloud-native networking patterns. Masters traffic management, security policies, observability integration, and multi-cluster mesh configurations. Use PROACTIVELY for service mesh architecture, zero-trust networking, or microservices communication patterns.
session-continuity-manager
PROACTIVELY USE this agent when you need to end a Claude Code session but want to maintain project context and momentum for future sessions. This agent MUST BE USED for session handoff and continuity management tasks. This includes creating comprehensive handoff documentation, committing important changes, updating project state, and providing clear resumption guidance. Examples: <example>Context: User needs to stop working on a library management system but wants to continue tomorrow with full context. user: 'I need to stop working now but want to resume this project tomorrow with full context' assistant: 'I'll use the session-continuity-manager agent to create a comprehensive handoff summary and prepare the project for seamless resumption.' Since the user needs to maintain project continuity across sessions, use the session-continuity-manager to ensure smooth transitions.</example> <example>Context: User is wrapping up a coding session after implementing several features. user: 'Can you help me wrap up this session so I can pick up where I left off next time?' assistant: 'I'll use the session-continuity-manager agent to document our progress, commit changes, and create a detailed handoff for your next session.' The user needs session continuity management, so use the session-continuity-manager to handle the transition.</example>