Runs before the agent uses a tool for Bash, Read, Edit, Write and Bash tool calls, executing block-dangerous-commands.js and protect-secrets.js (2 commands). From TrevorEdris/fellowship-of-the-workflows.
Python patterns and idioms. Use when writing, reviewing, or refactoring Python code. Covers error handling, async, type system, testing, and project structure.
Rust patterns and idioms. Use when writing, reviewing, or refactoring Rust code. Covers error handling, type system, concurrency, testing, and project structure.
TypeScript patterns and idioms. Use when writing, reviewing, or refactoring TypeScript code. Covers type system, error handling, async, testing, and project structure.
Reviews AWS architecture for cost efficiency, security posture, resilience, and operational excellence. Evaluates service selection, IaC design, networking topology, and cross-cutting concerns. Use when designing new AWS workloads, reviewing existing infrastructure code, or preparing for a Well-Architected Review.
Specialist for AWS infrastructure-as-code using CloudFormation, CDK, and SAM. Use for authoring templates, reviewing IaC for correctness and security, migrating CloudFormation to CDK, and interpreting change sets or cdk diff output. Applies AWS Well-Architected principles and enforces security defaults.
Read-only IAM policy and CloudTrail audit agent. Analyzes IAM policies, roles, and trust relationships for least-privilege violations, privilege escalation paths, and compliance gaps. Produces structured findings with severity ratings. Use when reviewing IAM before deployment, auditing existing AWS accounts, or…
Specialized agent for Azure architecture decisions — service selection, resource sizing, region strategy, redundancy, cost optimization, and Well-Architected Framework alignment. Use when designing new Azure workloads or evaluating existing architecture.
Use this agent for deep Cloud Run and GCP serverless operations — deploying services, configuring traffic splits, debugging cold starts, setting up Pub/Sub push subscriptions, configuring Eventarc triggers, and choosing between Cloud Run, Cloud Functions, and GKE. Invoke when the /cloud-run skill needs specialist…
Use this agent to audit GCP IAM policies for over-privilege, exposed service accounts, key files in production, and missing Workload Identity Federation. Produces a prioritized findings report with remediation commands. Invoke when the /gcp-iam skill needs audit or analysis execution.
OpenTelemetry instrumentation specialist. Sets up OTel SDK, Collector configuration, trace/metric/log pipelines, Prometheus exposition, Grafana dashboard templates, and SLO definitions. Use for services instrumented with OTel.
Specialist for Pulumi infrastructure programs in TypeScript, Python, Go, and C#. Use for authoring multi-cloud Pulumi programs, writing CrossGuard policy packs, managing state backends, interpreting pulumi preview output, and migrating from Terraform or CloudFormation. Enforces Output/Input typing discipline and stack…
Terraform configuration specialist for writing, reviewing, refactoring, and auditing Terraform modules and root configurations with production-ready patterns.
Azure SDK and IaC patterns: prefer Managed Identity over connection strings, use DefaultAzureCredential correctly, apply RBAC at narrowest scope, and choose Bicep vs Terraform per context.
AWS CDK construct authoring conventions: L1/L2/L3 construct selection, security defaults, stack and stage structure, cdk-nag security scanning, and assertions testing. Apply when cdk.json is present in the project.