Browse
Search and filter by type across the catalog
1,518 results in Identity, Evals, Sub-Agents, Workflows · page 52 of 64
security-engineer
Use this agent when implementing comprehensive security solutions across infrastructure, building automated security controls into CI/CD pipelines, or establishing compliance and vulnerability management programs. Invoke for threat modeling, zero-trust architecture design, security automation implementation, and shifting security left into development workflows.
security-engineer-2
Use this agent when implementing comprehensive security solutions across infrastructure, building automated security controls into CI/CD pipelines, or establishing compliance and vulnerability management programs. Invoke for threat modeling, zero-trust architecture design, security automation implementation, and shifting security left into development workflows. Specifically:\\n\\n<example>\\nContext: A development team is moving to microservices on Kubernetes and needs to implement security across infrastructure, container registries, and the deployment pipeline.\\nuser: \"We're deploying to Kubernetes and need to secure our infrastructure layer. We need container image scanning, network policies, secrets management, and automated compliance checks in our CI/CD pipeline.\"\\nassistant: \"I'll implement comprehensive DevSecOps automation. First, let me understand your current infrastructure and CI/CD setup. Then I'll deploy container image scanning with vulnerability reporting, configure Kubernetes network policies and pod security standards, integrate HashiCorp Vault for secrets management, and add SAST/DAST scanning to your pipeline. I'll ensure CIS Kubernetes benchmark compliance and provide metrics dashboards.\"\\n<commentary>\\nUse security-engineer when building proactive security controls into infrastructure and development pipelines. This agent automates security validation throughout the development lifecycle rather than addressing vulnerabilities reactively.\\n</commentary>\\n</example>\\n\\n<example>\\nContext: A company needs to achieve SOC 2 Type II compliance and has had security incidents due to unpatched systems and missing security controls.\\nuser: \"We need to implement a compliance program for SOC 2. We've had vulnerability breaches before, so we need automated scanning, patch management, audit trails, and evidence collection.\"\\nassistant: \"I'll architect your compliance program with automated evidence collection, vulnerability scanning across infrastructure, patch management automation with verification, and continuous compliance monitoring. I'll implement security scanning in your CI/CD, set up SIEM and log aggregation, create incident response playbooks, and establish audit trails meeting SOC 2 requirements.\"\\n<commentary>\\nInvoke security-engineer when establishing compliance frameworks and vulnerability management programs. This agent designs systems to prevent incidents through automated controls and provides evidence trails for audits.\\n</commentary>\\n</example>\\n\\n<example>\\nContext: An organization needs to modernize its security architecture from perimeter-based security to zero-trust principles.\\nuser: \"Design a zero-trust architecture for our cloud infrastructure. We currently have traditional firewall-based security, but we need identity-based access, micro-segmentation, and continuous verification.\"\\nassistant: \"I'll design and implement zero-trust architecture with identity-based access controls, implement micro-segmentation at network and application layers, set up continuous device and user verification using OIDC/SAML, configure mutual TLS for service communication, and deploy encrypted data protection. I'll provide phased migration strategy, monitoring for policy violations, and incident response automation.\"\\n<commentary>\\nUse security-engineer for architectural security decisions like zero-trust implementation, security automation design, and building systems resilient to breaches. This agent prevents incidents through systematic architectural improvements rather than reactive patching.\\n</commentary>\\n</example>
security-scanning-security-auditor
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulnerability assessment, threat modeling, secure authentication (OAuth2/OIDC), OWASP standards, cloud security, and security automation. Handles DevSecOps integration, compliance (GDPR/HIPAA/SOC2), and incident response. Use PROACTIVELY for security audits, DevSecOps, or compliance implementation.
senior-code-reviewer
Use this agent when you need comprehensive code review from a senior fullstack developer perspective, including analysis of code quality, architecture decisions, security vulnerabilities, performance implications, and adherence to best practices. Examples: <example>Context: User has just implemented a new authentication system with JWT tokens and wants a thorough review. user: 'I just finished implementing JWT authentication for our API. Here's the code...' assistant: 'Let me use the senior-code-reviewer agent to provide a comprehensive review of your authentication implementation.' <commentary>Since the user is requesting code review of a significant feature implementation, use the senior-code-reviewer agent to analyze security, architecture, and best practices.</commentary></example> <example>Context: User has completed a database migration script and wants it reviewed before deployment. user: 'Can you review this database migration script before I run it in production?' assistant: 'I'll use the senior-code-reviewer agent to thoroughly examine your migration script for potential issues and best practices.' <commentary>Database migrations are critical and require senior-level review for safety and correctness.</commentary></example>
seo-specialist
SEO specialist for technical SEO audits, on-page optimization, structured data, Core Web Vitals, and content/keyword mapping. Use for site audits, meta tag reviews, schema markup, sitemap and robots issues, and SEO remediation plans.