pr-fixer
Use to resolve findings on an existing pull request - review comments, CI failures, and self-review findings - fixing code, updating tests, re-verifying gates,…
An agent is a specialist Claude hands a whole job to, with its own tools and its own context.
4,481 agents across 361 plugins.
Use to resolve findings on an existing pull request - review comments, CI failures, and self-review findings - fixing code, updating tests, re-verifying gates,…
Use for high-signal review of a diff or pull request in any codebase, with emphasis on scope (PR intent), correctness, contract drift, security,…
Use for a focused security pass on a diff or pull request - authorization, secrets, input validation, data exposure, webhook verification, and OWASP-style…
Runs Track 5 (product & launch readiness) of the Preflight Security Audit — accessibility (WCAG 2.1 AA), technical SEO, Core Web Vitals, monitoring/alerting,…
Runs Track 4 (privacy & compliance) of the Preflight Security Audit — PII inventory & data flow, GDPR/KVKK consent & lawful basis, cookie consent, data…
Runs Track 2 (web/app security) of the Preflight Security Audit — XSS, CSRF, SSRF, security headers/CORS/TLS, cryptography, file upload, rate limiting,…
The `xhigh` rung of `cad-executor`; `bin/route.mjs` picks it, not the user.
The `low` rung of `cad-plan-checker` (goal-backward plan gate); `bin/route.mjs` picks it, not the user.
The `high` rung of `cad-plan-checker`; `bin/route.mjs` picks it, not the user.
Stage 1 peer code reviewer focused on memory safety, modern C++ idioms, and undefined behavior.
Stage 1 peer code reviewer focused on idiomatic Go, error handling, and concurrency patterns.
Stage 1 peer code reviewer focused on JVM idioms, Spring/Android patterns, and null safety.
You are a security auditor focused on protecting API keys, preventing credentials leaks, and securing Webhook entry points.
Invoke after a developer commit to run build, test, and lint and emit a BMAD-style PASS/CONCERNS/FAIL gate verdict as JSON. Read-only; never modifies code.
SAST specialist for OWASP Mobile M7:2024 Insufficient Binary Protections. Invoke during mobile Phase 03 Testing after…
SAST specialist for business-logic vulnerabilities (race conditions, workflow bypass, price/grade/quantity tampering). Invoke during Phase 03 Testing after…
SAST specialist for OWASP Mobile M1:2024 Improper Credential Usage. Invoke during mobile Phase 03 Testing after artifacts/mapping/mobile-attack-surface.json…
Use as the top-level orchestrator at the start of any new app project, or when the user wants strategic direction, scope decisions, prioritization tradeoffs,…
Use as the single founder interface — prepares decision briefs, tracks unresolved commitments, ensures every founder decision reaches a specification, and…
Use after a developer finishes a ticket and before tech-manager merges. Reviews a single branch / diff against the impl spec, the engineering principles, and…
Pre-submission auditor for React Native releases. Delegate before an App Store or Play Store submission to verify versioning, OTA safety, permissions, secrets…
Read-only codebase explorer. Use for "where is X", "how does Y work", "which files touch Z" - returns conclusions with file:line refs, never file dumps. Never…
Runs tests, builds, and linters; reports compactly. Mechanical run-and-report only. Do NOT use when failures need interpretation or fixing - that is e2e-runner…
Cheap gate before accepting another agent's diff - does it match the task (scope, completeness, obvious breakage)? Returns PASS/FAIL with reasons. NOT a code…
- Google Scholar - Semantic Scholar - Crossref - OpenAlex
- Hugging Face - Ollama Library - OpenRouter - Replicate - CivitAI
Validates knowledge graphs for correctness, completeness, and quality. Runs systematic checks and renders approval or rejection decisions.
Use this agent when users need help understanding, querying, or working with an Understand-Anything knowledge graph. Guides users through graph structure,…
Scans a codebase directory to produce a structured inventory of all project files, detected languages, frameworks, import maps, and estimated complexity.
Expert backend architect specializing in scalable API design, microservices architecture, and distributed systems. Masters REST/GraphQL/gRPC APIs, event-driven…
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security…
Master of defensive Bash scripting for production automation, CI/CD pipelines, and system utilities. Expert in safe, portable, and testable shell scripts.
AI ethics and responsible AI development specialist. Use when reviewing an AI system for bias, fairness violations, or regulatory compliance gaps; when…
This custom agent uses Amplitude's MCP tools to deploy new experiments inside of Amplitude, enabling seamless variant testing capabilities and rollout of…
Expert API architect for designing and implementing REST and GraphQL APIs with production-grade resilience, security, and versioning. Use this agent when you…
Company Architect — a senior chief of staff who builds a business from scratch as an OKF (Open Knowledge Format) bundle: a tree of version-controllable .md…
Backend-engineering orchestrator. Walks the 7 Matt Pocock forcing questions (read/write ratio + QPS, tenancy, sync vs async, data sensitivity, pattern,…
Process-obsessed BizOps lead. Routes internal-operations inquiries (process / vendor / capacity / comms / SOP / procurement) to the right sub-skill via the…
© 2026 Flowy · Free and open source
Built for Claude Code · Not affiliated with Anthropic