Security vulnerability scanner. Invoked when code crosses a trust boundary: parsing untrusted input, constructing queries or commands from user data, handling credentials or tokens, introducing hardcoded secrets or API keys, enforcing authorization, or modifying security-relevant configuration.
Semantic compressor for Cursor rule files in .cursor/rules/. Converts markdown rules to CRUX notation achieving 5-10x token reduction while preserving all actionable information.
An architecture agent that explores a problem and produces design decisions for later implementation work. It focuses on understanding the domain, constraints, modules, interfaces, and alternatives before code is written.
A design-review agent that examines an architecture proposal against the domain model and existing architecture decisions. It reports problems without changing the design documents.
A planning agent that turns an approved design into an ordered set of implementation tasks. It creates product requirements, an implementation plan, and individual issue files.