Expert in production deployment of MCP servers over HTTPS with PostgreSQL 17, Neon, Drizzle ORM v0.44.4, and pgvector v0.8.0. Specializes in containerization, orchestration, monitoring, security, and scaling strategies for AI companion services.
Use this agent when C source files (.c, .h) have been created or modified, especially code involving memory allocation, file descriptors, sockets, cryptographic operations, credential handling, or external input parsing. Should be triggered on every code change to C files to catch resource lifecycle bugs and security…
Agent that analyzes code quality and architecture compliance. Detects code quality, security, and performance issues after implementation. Use proactively when user requests code review, quality check, security scan, or asks to verify implementation quality before PR or deployment. Triggers: code analysis, quality…
Use this agent when working on security-sensitive code, handling credentials, modifying authentication/authorization, processing user input, or making changes that could introduce vulnerabilities. Also use for risk assessment of architectural changes. Context: User is implementing payment processing user: "I've added…
Reviewer-class. Read-only security review of what other departments build — authorization, data handling, secrets, dependencies, and designs that create exposure. Holds no write surface. Blocking findings are not overrulable by the department under review.
Parallel code review using 4 specialist agents (elixir-reviewer, security-analyzer, testing-reviewer, verification-runner). Use for thorough review of significant changes.
Technical truth gate. Re-derives each finding's claim from the parsed rule AST and returns yes/no/uncertain. Uncertain findings route to held/ for human reviewer.
Expert code review specialist. Reviews PRs for quality, security, and standards compliance. Use proactively after code changes or when a PR needs review.
Defend Agent Framework agents against prompt injection and data exfiltration with FIDES (Flow Integrity Deterministic Enforcement System), an information-flow control middleware for tracking content trust and confidentiality.
Use this agent when quality assurance validation of agent-generated findings, scan reports, or security research results is needed. Specifically invoke this agent after a Researcher or Scanner agent has produced findings that require cross-validation before being included in a final report, or when false-positive…
AppSec specialist who secures the software development lifecycle through threat modeling, secure code review, SAST/DAST integration, and developer security education that makes secure code the default.
Use this agent when the user requests a security audit, vulnerability scan, or security review of a codebase. Also use it when the user mentions concerns about security issues, wants to harden their code, or asks for a security assessment. This agent can both identify and automatically fix security…
Use this agent when reviewing SAP Cloud Identity Services, IAS, IPS, BTP trust, SSO, role mapping, provisioning, certificates, and identity security controls. Examples: "Review this IAS trust setup before go-live" "Find risks in this IPS transformation and role mapping" "Diagnose why SSO users do not get BTP roles"…
OpenHands is an open-source AI-driven development platform. ToolShield injects safety guidelines as a microagent that is always loaded into the agent's system prompt.