agent-toolkit-agents

Plugin agent-toolkit-agents from marketplace agent-toolkit in ulises-jeremias/agent-toolkit. Commands read from the repo's manifest — today.

Subagents (18)

• agentic-security-reviewer

  Agentic security review specialist — prompt injection, tool poisoning, excessive agency, credential exposure, supply-chain, MCP/plugin hardening with OWASP LLM01-10 + AGNT01-06. Use when security-engineer delegates agentic surface or skill/MCP/hook changes warrant isolated audit; opt-in via holistic

• architect

  Software architecture and system design specialist. Use when designing systems, choosing patterns, evaluating technical approaches, or planning large-scale structural changes.

• assistant

  agent-toolkit Dev Companion — follows internal conventions and best practices. Use for any work in agent-toolkit or client repositories to ensure compliance with agent-toolkit standards.

• build-error-resolver

  Build and TypeScript error resolution specialist — large diagnostic context, root-cause triage across tsc/lint/webpack/vite. Use when platform-engineer delegates CI failure logs or fix requires full error/stack analysis; opt-in via holistic caller — not a daily entry point.

• client-workflow-bootstrap

  Meta-generator / orchestrator — onboarding interview that meta-generates <client>-workflow + <client>-dev-companion skills and opens a draft PR. Use when onboarding a new client project or updating an existing delivery workflow skill pair; not a daily delivery persona.

• code-reviewer

  Expert code review specialist — quality/correctness/security/performance/testing with severity-ranked findings. Use when reviewer/qa-engineer delegates deep craft or PR explicitly warrants independent verification; opt-in via holistic caller.

• data-engineer

  Data engineering specialist — dbt/Snowflake validation, Jupyter notebooks, data artifact stewardship. Use when: dbt parse/compile/test, Snowflake read-only checks, notebook scaffolding, or validating data pipelines and dbt models per repo docs. - architect - implementer - platform-engineer - qa-engi

• designer

  Design routing and UI/UX specialist — owns contextual selection among design skills (frontend-design, frontend-design-review, web-design-guidelines, design-assessment, design-improvement, scroll-world, Figma family, brag/brag-slim, accessibility/review). Use when: new visual direction, design review

• e2e-runner

  End-to-end testing specialist using Playwright — selector discipline, POM, and flake avoidance with explicit browser-output isolation. Use when qa-engineer delegates E2E authoring/debugging or task explicitly requires Playwright specs; opt-in via holistic caller — not a daily entry point.

• implementer

  Implementation specialist — feature/bug/refactoring delivery, build/test loop, TDD-aware scaffolding and docs generation. Use when: new feature or bug fix, refactoring with behavior preservation, scaffolding tasks, generating README/CHANGELOG/API docs, or owning the red-green-refactor loop. - tdd-gu

• planner

  Expert planning specialist for complex features and refactoring. Use before starting any significant implementation to break down work, identify risks, and create an actionable plan.

• platform-engineer

  Platform and forge specialist — CI/CD, GitHub/GitLab PR lifecycle, merge-conflicts, worktrees, integrations (Slack/Linear/ClickUp/MCP), loops/swarm, triage, llm-cost-advisor, cli-for-agents, herdr. Use when: CI failure, PR/MR lifecycle, worktrees, MCP setup, incidents, integrations, swarm/loops, CLI

• qa-engineer

  Quality-assurance and verification specialist — lint gates, browser automation, E2E, behavioral verification, bug triage. Use when: verifying behavior before ship, writing/debugging E2E tests, running MegaLinter/CodeQL gates, browser-grounded verification, or triaging bugs for incident escalation. -

• researcher

  Research and discovery specialist — spike findings, evidence-intake, framework/docs exploration, inventory, reference examples. Use when: unknown needs time-boxed investigation, implementation strategy/risks/tradeoffs, upstream/framework docs lookup, project-assessment evidence map, or discovering i

• reviewer

  Independent quality/craft reviewer — owns change impact, deep review, anti-slop (code + prose), and verification separation. Use when: PR review, refactor review, prose/doc review before publish, or proving blast radius before shipping. - code-reviewer - architect - designer - implementer - qa-engin

• security-engineer

  Security hardening specialist — app + agentic security, threat modeling, supply-chain/MCP audit, SARIF triage. Use when: security-sensitive PR/endpoint, agentic/MCP/plugin change, supply-chain before adoption, STRIDE/threat model, or CodeQL/SARIF triage. - agentic-security-reviewer - security-review

• security-reviewer

  App-code security review specialist — OWASP Top 10 (injection, auth, data exposure, deps), CVE-mapped. Use when security-engineer delegates app-surface hardening or code change touches auth/data/API; opt-in via holistic caller.

• tdd-guide

  Test-Driven Development specialist — enforces red-green-refactor with AAA, test doubles and behavior-first coverage. Use when implementer delegates test-first discipline or task explicitly requires TDD; opt-in via holistic caller — not a daily entry point.

Similar plugins