security-reviewer
Use for a focused security pass on a diff or pull request - authorization, secrets, input validation, data exposure, webhook verification, and OWASP-style…
An agent is a specialist Claude hands a whole job to, with its own tools and its own context.
2,200 agents across 245 plugins.
Use for a focused security pass on a diff or pull request - authorization, secrets, input validation, data exposure, webhook verification, and OWASP-style…
The `xhigh` rung of `cad-executor`; `bin/route.mjs` picks it, not the user.
The `low` rung of `cad-plan-checker` (goal-backward plan gate); `bin/route.mjs` picks it, not the user.
The `high` rung of `cad-plan-checker`; `bin/route.mjs` picks it, not the user.
Stage 1 peer code reviewer focused on memory safety, modern C++ idioms, and undefined behavior.
Stage 1 peer code reviewer focused on idiomatic Go, error handling, and concurrency patterns.
Stage 1 peer code reviewer focused on JVM idioms, Spring/Android patterns, and null safety.
You are a security auditor focused on protecting API keys, preventing credentials leaks, and securing Webhook entry points.
Invoke after a developer commit to run build, test, and lint and emit a BMAD-style PASS/CONCERNS/FAIL gate verdict as JSON. Read-only; never modifies code.
SAST specialist for OWASP Mobile M7:2024 Insufficient Binary Protections. Invoke during mobile Phase 03 Testing after…
SAST specialist for business-logic vulnerabilities (race conditions, workflow bypass, price/grade/quantity tampering). Invoke during Phase 03 Testing after…
SAST specialist for OWASP Mobile M1:2024 Improper Credential Usage. Invoke during mobile Phase 03 Testing after artifacts/mapping/mobile-attack-surface.json…
Use as the top-level orchestrator at the start of any new app project, or when the user wants strategic direction, scope decisions, prioritization tradeoffs,…
Use as the single founder interface — prepares decision briefs, tracks unresolved commitments, ensures every founder decision reaches a specification, and…
Use after a developer finishes a ticket and before tech-manager merges. Reviews a single branch / diff against the impl spec, the engineering principles, and…
Read-only codebase explorer. Use for "where is X", "how does Y work", "which files touch Z" - returns conclusions with file:line refs, never file dumps. Never…
Runs tests, builds, and linters; reports compactly. Mechanical run-and-report only. Do NOT use when failures need interpretation or fixing - that is e2e-runner…
Cheap gate before accepting another agent's diff - does it match the task (scope, completeness, obvious breakage)? Returns PASS/FAIL with reasons. NOT a code…
Use when a user prompt arrives in Gaia and needs to be routed — when intent must be matched to a specialist surface, when multiple surfaces touch the same…
Use when planning a feature or decomposing work from a brief into an executable plan -- turning objectives and acceptance criteria into ordered, testable tasks…
Use when building, modifying, or auditing Gaia's own machinery — agents, skills, hooks and hook modules, routing config, CLI plugins, build manifests — or when…
- Google Scholar - Semantic Scholar - Crossref - OpenAlex
- Hugging Face - Ollama Library - OpenRouter - Replicate - CivitAI
Applies researched improvements to Claude Code components, validates changes with the component-reviewer agent, and creates pull requests. The only agent that…
Migrates components (agents, commands, skills, hooks, settings, MCPs) from external GitHub repositories to claude-code-templates, validates them with…
Investigates best practices and improvement opportunities for Claude Code components using web search and codebase analysis. Returns structured research…
Technical leadership advisor for CTOs covering technology strategy, team scaling, architecture decisions, and engineering excellence. Use when a CTO or…
Demand generation and acquisition-funnel specialist orchestrating the marketing-demand-acquisition, paid-ads, and email-sequence skills. Use when building or…
Engineering Team Lead agent for coordinating QA, security, data engineering, ML, and frontend/backend teams. Orchestrates engineering-team skills for…
Query the artifact index for precedent and guidance
Code review specialist that verifies every finding against actual code before reporting. Use before committing, for PR reviews, or after major changes.
Confidence-gated exploration that assesses readiness before implementation. Scores 0-100 across five dimensions and gives GO/HOLD verdict.
Blocking policy judge. Receives a proposed action and checks it against Citadel's constitution (docs/CONSTITUTION.md). Returns a structured allow/block verdict…
Verifies changed integration and E2E tests against skeletons, proof obligations, or explicit prompt claims. Use PROACTIVELY after test implementation…
Comprehensively collects problem-related information and creates evidence matrix. Use PROACTIVELY when bug/error/issue/defect/not working/strange behavior is…
Creates PRD and structures business requirements. Use when new feature/project starts, or when "PRD/requirements definition/user story/what to build" is…
API versiyonlama stratejileri, breaking change tespiti, migration guide olusturma, deprecation lifecycle yonetimi
Software architecture specialist for system design, scalability, and technical decision-making. Use PROACTIVELY when planning new features, refactoring large…
© 2026 Flowy · Free and open source
Built for Claude Code · Not affiliated with Anthropic