Instructions file GitHub Copilot
Instructions for KevinRabun/judges, covering adding a new judge — step-by-step, 0. create/update agent file (agents/ .judge.md), 1. create the evaluator, 2. create the judge definition (with self-registration) and 3. add the side-effect import.
Instructions file GitHub Copilot
Instructions for KevinRabun/judges: When reviewing pull requests in this repository.
Instructions file GitHub Copilot
Instructions for KevinRabun/judges, covering release & deployment — agent instructions, files that need version updates, changelogs that need updating, 1. root changelog.md and fixed.
Instructions file GitHub Copilot
Instructions for KevinRabun/judges, covering secure coding — preventing codeql / code scanning findings, 1. regex safety (js/polynomial-redos), 2. no sensitive data in logs (js/clear-text-logging), 3. complete sanitization (js/incomplete-sanitization) and 5. cryptographic key sizes (js/insufficient-key-size).
Instructions file GitHub Copilot
Instructions for KevinRabun/judges, covering vs code extension debugging — agent instructions, step 1: get the runtime error (always do this first), step 2: classify the error, step 3: validate the manifest against official docs and step 4: fix, rebuild, and verify locally.
Agent
Evaluates code for WCAG compliance, ARIA attributes, keyboard navigation, screen reader support, color contrast, semantic HTML, and inclusive design patterns.
Agent
Evaluates instruction markdown files for clarity, hierarchy, conflict risk, safety policy coverage, and operational guidance for AI coding agents.
Agent
Evaluates code for risks specifically common in AI-generated code — prompt injection, unsanitised LLM output, hallucinated patterns, debug-mode defaults, missing input validation, overly broad permissions, and insecure-by-default configurations.
Agent
Evaluates API endpoint implementations for contract conformance: input validation, proper status codes, error handling, rate limiting, versioning, and content-type management.
Agent
Evaluates API design for RESTful conventions, naming consistency, proper HTTP status codes, versioning, pagination, error contract consistency, and backward compatibility.
Agent
Evaluates code for proper authentication mechanisms, authorization checks, session management, token handling, and access control patterns.
Agent
Evaluates code for breaking changes, API versioning strategy, deprecation practices, and migration path planning that affect consumers and integrators.
Agent
Evaluates code for caching strategy, cache invalidation, TTL configuration, cache stampede prevention, and HTTP caching headers.
Agent
Evaluates code for CI/CD readiness, build reproducibility, deployment safety, pipeline configuration, and release management practices.
Agent
Evaluates code for cloud-native patterns, 12-factor app compliance, containerization readiness, infrastructure as code, observability, and CI/CD maturity.
Agent
Uses AST parsing (TypeScript compiler for JS/TS, scope-tracking parser for Python/Rust/Go/Java/C#) to evaluate cyclomatic complexity, nesting depth, function length, parameter count, dead code, and type-safety — metrics that regex alone cannot reliably measure.
Agent
Evaluates code for OSS license compatibility, audit logging, SOC 2 controls, export controls, data residency, retention policies, and regulatory readiness.
Agent
Evaluates code for race conditions, deadlocks, atomic operations, lock contention, shared mutable state, and async error propagation.
Agent
Evaluates code for proper externalization of configuration, secrets management, environment-based config switching, and feature flag implementation.
Agent
Evaluates code for unnecessary resource consumption, inefficient algorithms, wasteful cloud resource usage, and opportunities for cost optimization.
Agent
Evaluates code for vulnerability to attacks (injection, XSS, CSRF, SSRF), authentication/authorization flaws, dependency vulnerabilities, and adherence to OWASP Top 10.
Agent
Evaluates code for data protection, encryption practices, PII handling, data-at-rest/in-transit security, access controls, and compliance with data privacy regulations (GDPR, CCPA, HIPAA).
Agent
Evaluates code for data residency enforcement, cross-border transfer controls, jurisdiction-aware data handling, vendor independence (technological sovereignty), and operational self-governance (audit trails, resilience, data portability).
Agent
Evaluates code for query efficiency, connection management, migration practices, schema design, and database access patterns that affect performance and reliability.