@ngxtm/devkit 3.18.0 → 3.20.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/merged-commands/application-performance-performance-optimization.md +13 -13
- package/merged-commands/ask/fast.md +14 -57
- package/merged-commands/ask/hard.md +22 -79
- package/merged-commands/auto.md +6 -33
- package/merged-commands/backend-development-feature-development.md +12 -12
- package/merged-commands/bootstrap/auto/fast.md +15 -15
- package/merged-commands/bootstrap/auto/parallel.md +12 -12
- package/merged-commands/bootstrap/auto.md +14 -14
- package/merged-commands/bootstrap.md +15 -15
- package/merged-commands/brainstorm/fast.md +19 -72
- package/merged-commands/brainstorm/hard.md +23 -84
- package/merged-commands/c4-architecture-c4-architecture.md +5 -5
- package/merged-commands/code/auto.md +16 -16
- package/merged-commands/code/fast.md +19 -72
- package/merged-commands/code/hard.md +38 -122
- package/merged-commands/code/no-test.md +12 -12
- package/merged-commands/code/parallel.md +9 -9
- package/merged-commands/code.md +14 -14
- package/merged-commands/comprehensive-review-full-review.md +8 -8
- package/merged-commands/context-degradation.md +2 -2
- package/merged-commands/context-engineering.md +4 -4
- package/merged-commands/context-optimization.md +3 -3
- package/merged-commands/cook/auto/fast.md +3 -3
- package/merged-commands/cook/auto/parallel.md +9 -9
- package/merged-commands/cook/auto.md +1 -1
- package/merged-commands/cook/fast.md +38 -47
- package/merged-commands/cook/hard.md +46 -41
- package/merged-commands/cook.md +13 -13
- package/merged-commands/daily-news-report.md +15 -15
- package/merged-commands/data-engineering-data-driven-feature.md +16 -16
- package/merged-commands/debug/fast.md +13 -29
- package/merged-commands/debug/hard.md +47 -49
- package/merged-commands/debug.md +1 -1
- package/merged-commands/debugging-toolkit-smart-debug.md +1 -1
- package/merged-commands/deploy/check.md +22 -71
- package/merged-commands/deploy/preview.md +18 -62
- package/merged-commands/deploy/production.md +22 -71
- package/merged-commands/deploy/rollback.md +22 -71
- package/merged-commands/deploy.md +0 -11
- package/merged-commands/design/3d.md +3 -3
- package/merged-commands/design/describe.md +1 -1
- package/merged-commands/design/fast.md +2 -2
- package/merged-commands/design/good.md +3 -3
- package/merged-commands/design/hard.md +15 -85
- package/merged-commands/design/screenshot.md +1 -1
- package/merged-commands/design/video.md +1 -1
- package/merged-commands/design.md +0 -11
- package/merged-commands/doc-coauthoring.md +5 -5
- package/merged-commands/docker-expert.md +1 -1
- package/merged-commands/docs/audit.md +26 -77
- package/merged-commands/docs/business.md +26 -77
- package/merged-commands/docs/core.md +24 -68
- package/merged-commands/docs/init.md +8 -8
- package/merged-commands/docs/update.md +13 -13
- package/merged-commands/docs.md +0 -12
- package/merged-commands/error-debugging-multi-agent-review.md +1 -1
- package/merged-commands/error-diagnostics-smart-debug.md +1 -1
- package/merged-commands/finishing-a-development-branch.md +1 -1
- package/merged-commands/fix/ci.md +2 -2
- package/merged-commands/fix/fast.md +2 -2
- package/merged-commands/fix/hard.md +6 -6
- package/merged-commands/fix/logs.md +5 -5
- package/merged-commands/fix/parallel.md +9 -9
- package/merged-commands/fix/test.md +6 -6
- package/merged-commands/fix/ui.md +8 -8
- package/merged-commands/fixing.md +3 -3
- package/merged-commands/framework-migration-legacy-modernize.md +13 -13
- package/merged-commands/full-stack-orchestration-full-stack-feature.md +12 -12
- package/merged-commands/git/cm.md +1 -1
- package/merged-commands/git/cp.md +1 -1
- package/merged-commands/git/merge.md +1 -1
- package/merged-commands/git/pr.md +1 -1
- package/merged-commands/git-pr-workflows-git-workflow.md +10 -10
- package/merged-commands/google-adk-python.md +1 -1
- package/merged-commands/hr-pro.md +1 -1
- package/merged-commands/incident-response-incident-response.md +13 -13
- package/merged-commands/integrate/polar.md +3 -3
- package/merged-commands/integrate/sepay.md +3 -3
- package/merged-commands/journal.md +1 -1
- package/merged-commands/learn.md +51 -4
- package/merged-commands/linear-claude-skill.md +2 -2
- package/merged-commands/loki-mode.md +14 -14
- package/merged-commands/machine-learning-ops-ml-pipeline.md +7 -7
- package/merged-commands/mcp-management.md +8 -8
- package/merged-commands/multi-agent-patterns.md +14 -14
- package/merged-commands/multi-platform-apps-multi-platform.md +10 -10
- package/merged-commands/nestjs-expert.md +1 -1
- package/merged-commands/performance-testing-review-multi-agent-review.md +1 -1
- package/merged-commands/plan/archive.md +1 -1
- package/merged-commands/plan/ci.md +1 -1
- package/merged-commands/plan/fast.md +2 -2
- package/merged-commands/plan/hard.md +4 -4
- package/merged-commands/plan/parallel.md +5 -5
- package/merged-commands/plan/two.md +6 -6
- package/merged-commands/requesting-code-review.md +6 -6
- package/merged-commands/review/codebase/parallel.md +5 -5
- package/merged-commands/review/codebase.md +5 -5
- package/merged-commands/review/fast.md +13 -29
- package/merged-commands/review/hard.md +48 -49
- package/merged-commands/review.md +0 -11
- package/merged-commands/security-scanning-security-hardening.md +13 -13
- package/merged-commands/skill/add.md +6 -6
- package/merged-commands/skill/create.md +6 -6
- package/merged-commands/skill/fix-logs.md +6 -6
- package/merged-commands/skill/optimize/auto.md +1 -1
- package/merged-commands/skill/optimize.md +1 -1
- package/merged-commands/skill/plan.md +1 -1
- package/merged-commands/skill/update.md +6 -6
- package/merged-commands/subagent-driven-development.md +53 -53
- package/merged-commands/tdd-workflows-tdd-cycle.md +12 -12
- package/merged-commands/tdd-workflows-tdd-red.md +1 -1
- package/merged-commands/tdd-workflows-tdd-refactor.md +1 -1
- package/merged-commands/test/fast.md +22 -33
- package/merged-commands/test/hard.md +59 -56
- package/merged-commands/test/ui.md +1 -1
- package/merged-commands/test.md +1 -1
- package/merged-commands/typescript-expert.md +1 -1
- package/merged-commands/use-mcp.md +5 -5
- package/merged-commands/writing-plans.md +3 -3
- package/merged-commands/writing-skills.md +8 -8
- package/package.json +1 -1
- package/rules-index.json +1 -1
- package/skills/application-performance-performance-optimization/SKILL.md +13 -13
- package/skills/azure-ai-agents-python/references/tools.md +1 -1
- package/skills/backend-development-feature-development/SKILL.md +12 -12
- package/skills/best-practices/references/anti-patterns.md +2 -2
- package/skills/best-practices/references/best-practices-guide.md +14 -14
- package/skills/c4-architecture-c4-architecture/SKILL.md +5 -5
- package/skills/comprehensive-review-full-review/SKILL.md +8 -8
- package/skills/context-degradation/SKILL.md +2 -2
- package/skills/context-engineering/SKILL.md +4 -4
- package/skills/context-engineering/references/context-degradation.md +1 -1
- package/skills/context-engineering/references/context-optimization.md +1 -1
- package/skills/context-engineering/references/multi-agent-patterns.md +1 -1
- package/skills/context-engineering/references/runtime-awareness.md +1 -1
- package/skills/context-optimization/SKILL.md +3 -3
- package/skills/daily-news-report/SKILL.md +15 -15
- package/skills/data-engineering-data-driven-feature/SKILL.md +16 -16
- package/skills/debugging-toolkit-smart-debug/SKILL.md +1 -1
- package/skills/doc-coauthoring/SKILL.md +5 -5
- package/skills/docker-expert/SKILL.md +1 -1
- package/skills/error-debugging-multi-agent-review/SKILL.md +1 -1
- package/skills/error-diagnostics-smart-debug/SKILL.md +1 -1
- package/skills/finishing-a-development-branch/SKILL.md +1 -1
- package/skills/fixing/SKILL.md +3 -3
- package/skills/fixing/references/parallel-exploration.md +4 -4
- package/skills/fixing/references/skill-activation-matrix.md +3 -3
- package/skills/fixing/references/workflow-deep.md +11 -11
- package/skills/fixing/references/workflow-quick.md +4 -4
- package/skills/fixing/references/workflow-standard.md +12 -12
- package/skills/framework-migration-legacy-modernize/SKILL.md +13 -13
- package/skills/full-stack-orchestration-full-stack-feature/SKILL.md +12 -12
- package/skills/git-pr-workflows-git-workflow/SKILL.md +10 -10
- package/skills/google-adk-python/SKILL.md +1 -1
- package/skills/hr-pro/SKILL.md +1 -1
- package/skills/incident-response-incident-response/SKILL.md +13 -13
- package/skills/incident-response-smart-fix/resources/implementation-playbook.md +17 -17
- package/skills/learn/SKILL.md +51 -4
- package/skills/linear-claude-skill/SKILL.md +2 -2
- package/skills/loki-mode/ACKNOWLEDGEMENTS.md +4 -4
- package/skills/loki-mode/CHANGELOG.md +9 -9
- package/skills/loki-mode/CONTEXT-EXPORT.md +1 -1
- package/skills/loki-mode/README.md +2 -2
- package/skills/loki-mode/SKILL.md +14 -14
- package/skills/loki-mode/autonomy/run.sh +1 -1
- package/skills/loki-mode/integrations/vibe-kanban.md +1 -1
- package/skills/loki-mode/references/core-workflow.md +4 -4
- package/skills/loki-mode/references/production-patterns.md +6 -6
- package/skills/loki-mode/references/quality-control.md +2 -2
- package/skills/loki-mode/references/sdlc-phases.md +3 -3
- package/skills/machine-learning-ops-ml-pipeline/SKILL.md +7 -7
- package/skills/mcp-builder/reference/evaluation.md +3 -3
- package/skills/mcp-management/README.md +6 -6
- package/skills/mcp-management/SKILL.md +8 -8
- package/skills/mcp-management/references/gemini-cli-integration.md +1 -1
- package/skills/multi-agent-patterns/SKILL.md +14 -14
- package/skills/multi-platform-apps-multi-platform/SKILL.md +10 -10
- package/skills/nestjs-expert/SKILL.md +1 -1
- package/skills/performance-testing-review-multi-agent-review/SKILL.md +1 -1
- package/skills/planning-with-files/reference.md +2 -2
- package/skills/requesting-code-review/SKILL.md +6 -6
- package/skills/security-scanning-security-hardening/SKILL.md +13 -13
- package/skills/subagent-driven-development/SKILL.md +53 -53
- package/skills/subagent-driven-development/code-quality-reviewer-prompt.md +1 -1
- package/skills/subagent-driven-development/implementer-prompt.md +3 -3
- package/skills/subagent-driven-development/spec-reviewer-prompt.md +1 -1
- package/skills/tdd-workflows-tdd-cycle/SKILL.md +12 -12
- package/skills/tdd-workflows-tdd-green/resources/implementation-playbook.md +1 -1
- package/skills/tdd-workflows-tdd-red/SKILL.md +1 -1
- package/skills/tdd-workflows-tdd-refactor/SKILL.md +1 -1
- package/skills/typescript-expert/SKILL.md +1 -1
- package/skills/writing-plans/SKILL.md +3 -3
- package/skills/writing-skills/SKILL.md +8 -8
- package/skills/writing-skills/examples/CLAUDE_MD_TESTING.md +1 -1
- package/skills/writing-skills/references/cso/README.md +3 -3
- package/skills/writing-skills/testing-skills-with-subagents.md +1 -1
|
@@ -273,9 +273,9 @@ Task(subagent_type="general-purpose", model="opus",
|
|
|
273
273
|
|
|
274
274
|
---
|
|
275
275
|
|
|
276
|
-
## Structured Prompting for
|
|
276
|
+
## Structured Prompting for Task Agents
|
|
277
277
|
|
|
278
|
-
**Every
|
|
278
|
+
**Every Task agent dispatch MUST include:**
|
|
279
279
|
|
|
280
280
|
```markdown
|
|
281
281
|
## GOAL (What success looks like)
|
|
@@ -197,15 +197,15 @@ jobs:
|
|
|
197
197
|
### Workflow Per Task:
|
|
198
198
|
|
|
199
199
|
```
|
|
200
|
-
1. Dispatch implementation
|
|
201
|
-
2.
|
|
200
|
+
1. Dispatch implementation Task agent (Task tool, model: sonnet)
|
|
201
|
+
2. Task agent implements with TDD, commits, reports back
|
|
202
202
|
3. Dispatch 3 reviewers IN PARALLEL (single message, 3 Task calls):
|
|
203
203
|
- code-reviewer (opus)
|
|
204
204
|
- business-logic-reviewer (opus)
|
|
205
205
|
- security-reviewer (opus)
|
|
206
206
|
4. Aggregate findings by severity
|
|
207
207
|
5. IF Critical/High/Medium found:
|
|
208
|
-
- Dispatch fix
|
|
208
|
+
- Dispatch fix Task agent
|
|
209
209
|
- Re-run ALL 3 reviewers
|
|
210
210
|
- Loop until all PASS
|
|
211
211
|
6. Add TODO comments for Low issues
|
|
@@ -46,7 +46,7 @@ The multi-agent approach ensures each aspect is handled by domain experts:
|
|
|
46
46
|
## Phase 1: Data & Requirements Analysis
|
|
47
47
|
|
|
48
48
|
<Task>
|
|
49
|
-
subagent_type:
|
|
49
|
+
subagent_type: general-purpose
|
|
50
50
|
prompt: |
|
|
51
51
|
Analyze and design data pipeline for ML system with requirements: $ARGUMENTS
|
|
52
52
|
|
|
@@ -73,7 +73,7 @@ prompt: |
|
|
|
73
73
|
</Task>
|
|
74
74
|
|
|
75
75
|
<Task>
|
|
76
|
-
subagent_type:
|
|
76
|
+
subagent_type: general-purpose
|
|
77
77
|
prompt: |
|
|
78
78
|
Design feature engineering and model requirements for: $ARGUMENTS
|
|
79
79
|
Using data architecture from: {phase1.data-engineer.output}
|
|
@@ -103,7 +103,7 @@ prompt: |
|
|
|
103
103
|
## Phase 2: Model Development & Training
|
|
104
104
|
|
|
105
105
|
<Task>
|
|
106
|
-
subagent_type:
|
|
106
|
+
subagent_type: general-purpose
|
|
107
107
|
prompt: |
|
|
108
108
|
Implement training pipeline based on requirements: {phase1.data-scientist.output}
|
|
109
109
|
Using data pipeline: {phase1.data-engineer.output}
|
|
@@ -131,7 +131,7 @@ prompt: |
|
|
|
131
131
|
</Task>
|
|
132
132
|
|
|
133
133
|
<Task>
|
|
134
|
-
subagent_type:
|
|
134
|
+
subagent_type: general-purpose
|
|
135
135
|
prompt: |
|
|
136
136
|
Optimize and productionize ML code from: {phase2.ml-engineer.output}
|
|
137
137
|
|
|
@@ -160,7 +160,7 @@ prompt: |
|
|
|
160
160
|
## Phase 3: Production Deployment & Serving
|
|
161
161
|
|
|
162
162
|
<Task>
|
|
163
|
-
subagent_type:
|
|
163
|
+
subagent_type: general-purpose
|
|
164
164
|
prompt: |
|
|
165
165
|
Design production deployment for models from: {phase2.ml-engineer.output}
|
|
166
166
|
With optimized code from: {phase2.python-pro.output}
|
|
@@ -194,7 +194,7 @@ prompt: |
|
|
|
194
194
|
</Task>
|
|
195
195
|
|
|
196
196
|
<Task>
|
|
197
|
-
subagent_type:
|
|
197
|
+
subagent_type: general-purpose
|
|
198
198
|
prompt: |
|
|
199
199
|
Design Kubernetes infrastructure for ML workloads from: {phase3.mlops-engineer.output}
|
|
200
200
|
|
|
@@ -223,7 +223,7 @@ prompt: |
|
|
|
223
223
|
## Phase 4: Monitoring & Continuous Improvement
|
|
224
224
|
|
|
225
225
|
<Task>
|
|
226
|
-
subagent_type:
|
|
226
|
+
subagent_type: general-purpose
|
|
227
227
|
prompt: |
|
|
228
228
|
Implement comprehensive monitoring for ML system deployed in: {phase3.mlops-engineer.output}
|
|
229
229
|
Using Kubernetes infrastructure: {phase3.kubernetes-architect.output}
|
|
@@ -179,7 +179,7 @@ Read the documentation of the target API to understand:
|
|
|
179
179
|
- Available endpoints and functionality
|
|
180
180
|
- If ambiguity exists, fetch additional information from the web
|
|
181
181
|
- Parallelize this step AS MUCH AS POSSIBLE
|
|
182
|
-
- Ensure each
|
|
182
|
+
- Ensure each Task agent is ONLY examining documentation from the file system or on the web
|
|
183
183
|
|
|
184
184
|
### Step 2: Tool Inspection
|
|
185
185
|
|
|
@@ -204,8 +204,8 @@ After understanding the API and tools, USE the MCP server tools:
|
|
|
204
204
|
- Goal: identify specific content (e.g., users, channels, messages, projects, tasks) for creating realistic questions
|
|
205
205
|
- Should NOT call any tools that modify state
|
|
206
206
|
- Will NOT read the code of the MCP server implementation itself
|
|
207
|
-
- Parallelize this step with individual
|
|
208
|
-
- Ensure each
|
|
207
|
+
- Parallelize this step with individual Task agents pursuing independent explorations
|
|
208
|
+
- Ensure each Task agent is only performing READ-ONLY, NON-DESTRUCTIVE, and IDEMPOTENT operations
|
|
209
209
|
- BE CAREFUL: SOME TOOLS may return LOTS OF DATA which would cause you to run out of CONTEXT
|
|
210
210
|
- Make INCREMENTAL, SMALL, AND TARGETED tool calls for exploration
|
|
211
211
|
- In all tool call requests, use the `limit` parameter to limit results (<10)
|
|
@@ -4,7 +4,7 @@ Intelligent management and execution of Model Context Protocol (MCP) servers.
|
|
|
4
4
|
|
|
5
5
|
## Overview
|
|
6
6
|
|
|
7
|
-
This skill enables Claude to discover, analyze, and execute MCP server capabilities without polluting the main context window. Perfect for context-efficient MCP integration using
|
|
7
|
+
This skill enables Claude to discover, analyze, and execute MCP server capabilities without polluting the main context window. Perfect for context-efficient MCP integration using Task agent-based architecture.
|
|
8
8
|
|
|
9
9
|
## Features
|
|
10
10
|
|
|
@@ -12,7 +12,7 @@ This skill enables Claude to discover, analyze, and execute MCP server capabilit
|
|
|
12
12
|
- **Intelligent Tool Discovery**: Analyze which tools are relevant for specific tasks
|
|
13
13
|
- **Progressive Disclosure**: Load only necessary tool definitions
|
|
14
14
|
- **Execution Engine**: Call MCP tools with proper parameter handling
|
|
15
|
-
- **Context Efficiency**: Delegate MCP operations to `mcp-manager`
|
|
15
|
+
- **Context Efficiency**: Delegate MCP operations to `mcp-manager` Task agent
|
|
16
16
|
|
|
17
17
|
## Quick Start
|
|
18
18
|
|
|
@@ -71,13 +71,13 @@ The LLM reads `assets/tools.json` and intelligently selects tools. No separate a
|
|
|
71
71
|
npx ts-node scripts/cli.ts call-tool memory add '{"key":"name","value":"Alice"}'
|
|
72
72
|
```
|
|
73
73
|
|
|
74
|
-
### Pattern 4: Use with
|
|
74
|
+
### Pattern 4: Use with Task agent
|
|
75
75
|
|
|
76
76
|
In main Claude conversation:
|
|
77
77
|
|
|
78
78
|
```
|
|
79
79
|
User: "I need to search the web and save results"
|
|
80
|
-
Main Agent: [Spawns mcp-manager
|
|
80
|
+
Main Agent: [Spawns mcp-manager Task agent]
|
|
81
81
|
mcp-manager: Discovers brave-search + memory tools, reports back
|
|
82
82
|
Main Agent: Uses recommended tools for implementation
|
|
83
83
|
```
|
|
@@ -87,7 +87,7 @@ Main Agent: Uses recommended tools for implementation
|
|
|
87
87
|
```
|
|
88
88
|
Main Agent (Claude)
|
|
89
89
|
↓ (delegates MCP tasks)
|
|
90
|
-
mcp-manager
|
|
90
|
+
mcp-manager Task agent
|
|
91
91
|
↓ (uses skill)
|
|
92
92
|
mcp-management Skill
|
|
93
93
|
↓ (connects via)
|
|
@@ -96,7 +96,7 @@ MCP Servers (memory, filesystem, etc.)
|
|
|
96
96
|
|
|
97
97
|
**Benefits**:
|
|
98
98
|
- Main agent context stays clean
|
|
99
|
-
- MCP discovery happens in isolated
|
|
99
|
+
- MCP discovery happens in isolated Task agent context
|
|
100
100
|
- Only relevant tool definitions loaded when needed
|
|
101
101
|
- Reduced token usage
|
|
102
102
|
|
|
@@ -15,7 +15,7 @@ MCP is an open protocol enabling AI agents to connect to external tools and data
|
|
|
15
15
|
- Progressive disclosure of MCP capabilities (load only what's needed)
|
|
16
16
|
- Intelligent tool/prompt/resource selection based on task requirements
|
|
17
17
|
- Multi-server management from single config file
|
|
18
|
-
- Context-efficient:
|
|
18
|
+
- Context-efficient: Task agents handle MCP discovery and execution
|
|
19
19
|
- Persistent tool catalog: automatically saves discovered tools to JSON for fast reference
|
|
20
20
|
|
|
21
21
|
## When to Use This Skill
|
|
@@ -25,7 +25,7 @@ Use this skill when:
|
|
|
25
25
|
2. **Task-Based Tool Selection**: Analyzing which MCP tools are relevant for a specific task
|
|
26
26
|
3. **Executing MCP Tools**: Calling MCP tools programmatically with proper parameter handling
|
|
27
27
|
4. **MCP Integration**: Building or debugging MCP client implementations
|
|
28
|
-
5. **Context Management**: Avoiding context pollution by delegating MCP operations to
|
|
28
|
+
5. **Context Management**: Avoiding context pollution by delegating MCP operations to Task agents
|
|
29
29
|
|
|
30
30
|
## Core Capabilities
|
|
31
31
|
|
|
@@ -80,7 +80,7 @@ echo "Take a screenshot of https://example.com" | gemini -y -m gemini-2.5-flash
|
|
|
80
80
|
npx tsx scripts/cli.ts call-tool memory create_entities '{"entities":[...]}'
|
|
81
81
|
```
|
|
82
82
|
|
|
83
|
-
**Fallback: mcp-manager
|
|
83
|
+
**Fallback: mcp-manager Task agent**
|
|
84
84
|
|
|
85
85
|
See [references/gemini-cli-integration.md](references/gemini-cli-integration.md) for complete examples.
|
|
86
86
|
|
|
@@ -106,14 +106,14 @@ echo "Take a screenshot of https://example.com. Return JSON only per GEMINI.md i
|
|
|
106
106
|
- Automatic tool discovery
|
|
107
107
|
- Structured JSON responses (parseable by Claude)
|
|
108
108
|
- GEMINI.md auto-loaded for consistent formatting
|
|
109
|
-
- Faster than
|
|
109
|
+
- Faster than Task agent orchestration
|
|
110
110
|
- No natural language ambiguity
|
|
111
111
|
|
|
112
112
|
See [references/gemini-cli-integration.md](references/gemini-cli-integration.md) for complete guide.
|
|
113
113
|
|
|
114
|
-
### Pattern 2:
|
|
114
|
+
### Pattern 2: Task Agent-Based Execution (Fallback)
|
|
115
115
|
|
|
116
|
-
Use `mcp-manager` agent when Gemini CLI unavailable.
|
|
116
|
+
Use `mcp-manager` agent when Gemini CLI unavailable. Task agent discovers tools, selects relevant ones, executes tasks, reports back.
|
|
117
117
|
|
|
118
118
|
**Benefit**: Main context stays clean, only relevant tool definitions loaded when needed.
|
|
119
119
|
|
|
@@ -166,7 +166,7 @@ npx tsx cli.ts list-tools # Saves to assets/tools.json
|
|
|
166
166
|
npx tsx cli.ts call-tool memory create_entities '{"entities":[...]}'
|
|
167
167
|
```
|
|
168
168
|
|
|
169
|
-
**Method 3: mcp-manager
|
|
169
|
+
**Method 3: mcp-manager Task agent**
|
|
170
170
|
|
|
171
171
|
See [references/gemini-cli-integration.md](references/gemini-cli-integration.md) for complete guide.
|
|
172
172
|
|
|
@@ -193,7 +193,7 @@ See [references/mcp-protocol.md](references/mcp-protocol.md) for:
|
|
|
193
193
|
- Use when: Need specific tool/server control
|
|
194
194
|
- Execute: `npx tsx scripts/cli.ts call-tool <server> <tool> <args>`
|
|
195
195
|
|
|
196
|
-
3. **mcp-manager
|
|
196
|
+
3. **mcp-manager Task agent** (Fallback): Context-efficient delegation
|
|
197
197
|
- Use when: Gemini unavailable or failed
|
|
198
198
|
- Keeps main context clean
|
|
199
199
|
|
|
@@ -206,7 +206,7 @@ Shows detailed MCP communication logs.
|
|
|
206
206
|
| Direct Scripts | ⭐⭐ | ⭐⭐⭐ | ⭐⭐⭐ | Specific tools |
|
|
207
207
|
| mcp-manager | ⭐ | ⭐⭐ | ⭐⭐⭐ | Fallback |
|
|
208
208
|
|
|
209
|
-
**Recommendation**: Use Gemini CLI as primary method, fallback to scripts/
|
|
209
|
+
**Recommendation**: Use Gemini CLI as primary method, fallback to scripts/Task agent when unavailable.
|
|
210
210
|
|
|
211
211
|
## Resources
|
|
212
212
|
|
|
@@ -12,7 +12,7 @@ Master orchestrator, peer-to-peer, and hierarchical multi-agent architectures
|
|
|
12
12
|
Use this skill when working with master orchestrator, peer-to-peer, and hierarchical multi-agent architectures.
|
|
13
13
|
# Multi-Agent Architecture Patterns
|
|
14
14
|
|
|
15
|
-
Multi-agent architectures distribute work across multiple language model instances, each with its own context window. When designed well, this distribution enables capabilities beyond single-agent limits. When designed poorly, it introduces coordination overhead that negates benefits. The critical insight is that
|
|
15
|
+
Multi-agent architectures distribute work across multiple language model instances, each with its own context window. When designed well, this distribution enables capabilities beyond single-agent limits. When designed poorly, it introduces coordination overhead that negates benefits. The critical insight is that Task agents exist primarily to isolate context, not to anthropomorphize role division.
|
|
16
16
|
|
|
17
17
|
## When to Activate
|
|
18
18
|
|
|
@@ -26,7 +26,7 @@ Activate this skill when:
|
|
|
26
26
|
|
|
27
27
|
## Core Concepts
|
|
28
28
|
|
|
29
|
-
Multi-agent systems address single-agent context limitations through distribution. Three dominant patterns exist: supervisor/orchestrator for centralized control, peer-to-peer/swarm for flexible handoffs, and hierarchical for layered abstraction. The critical design principle is context isolation—
|
|
29
|
+
Multi-agent systems address single-agent context limitations through distribution. Three dominant patterns exist: supervisor/orchestrator for centralized control, peer-to-peer/swarm for flexible handoffs, and hierarchical for layered abstraction. The critical design principle is context isolation—Task agents exist primarily to partition context rather than to simulate organizational roles.
|
|
30
30
|
|
|
31
31
|
Effective multi-agent systems require explicit coordination protocols, consensus mechanisms that avoid sycophancy, and careful attention to failure modes including bottlenecks, divergence, and error propagation.
|
|
32
32
|
|
|
@@ -75,20 +75,20 @@ When to use: Complex tasks with clear decomposition, tasks requiring coordinatio
|
|
|
75
75
|
|
|
76
76
|
Advantages: Strict control over workflow, easier to implement human-in-the-loop interventions, ensures adherence to predefined plans.
|
|
77
77
|
|
|
78
|
-
Disadvantages: Supervisor context becomes bottleneck, supervisor failures cascade to all workers, "telephone game" problem where supervisors paraphrase
|
|
78
|
+
Disadvantages: Supervisor context becomes bottleneck, supervisor failures cascade to all workers, "telephone game" problem where supervisors paraphrase Task agent responses incorrectly.
|
|
79
79
|
|
|
80
80
|
**The Telephone Game Problem and Solution**
|
|
81
|
-
LangGraph benchmarks found supervisor architectures initially performed 50% worse than optimized versions due to the "telephone game" problem where supervisors paraphrase
|
|
81
|
+
LangGraph benchmarks found supervisor architectures initially performed 50% worse than optimized versions due to the "telephone game" problem where supervisors paraphrase Task agent responses incorrectly, losing fidelity.
|
|
82
82
|
|
|
83
|
-
The fix: implement a `forward_message` tool allowing
|
|
83
|
+
The fix: implement a `forward_message` tool allowing Task agents to pass responses directly to users:
|
|
84
84
|
|
|
85
85
|
```python
|
|
86
86
|
def forward_message(message: str, to_user: bool = True):
|
|
87
87
|
"""
|
|
88
|
-
Forward
|
|
89
|
-
|
|
88
|
+
Forward Task agent response directly to user without supervisor synthesis.
|
|
89
|
+
|
|
90
90
|
Use when:
|
|
91
|
-
-
|
|
91
|
+
- Task agent response is final and complete
|
|
92
92
|
- Supervisor synthesis would lose important details
|
|
93
93
|
- Response format must be preserved exactly
|
|
94
94
|
"""
|
|
@@ -97,9 +97,9 @@ def forward_message(message: str, to_user: bool = True):
|
|
|
97
97
|
return {"type": "supervisor_input", "content": message}
|
|
98
98
|
```
|
|
99
99
|
|
|
100
|
-
With this pattern, swarm architectures slightly outperform supervisors because
|
|
100
|
+
With this pattern, swarm architectures slightly outperform supervisors because Task agents respond directly to users, eliminating translation errors.
|
|
101
101
|
|
|
102
|
-
Implementation note: Implement direct pass-through mechanisms allowing
|
|
102
|
+
Implementation note: Implement direct pass-through mechanisms allowing Task agents to pass responses directly to users rather than through supervisor synthesis when appropriate.
|
|
103
103
|
|
|
104
104
|
**Pattern 2: Peer-to-Peer/Swarm**
|
|
105
105
|
The peer-to-peer pattern removes central control, allowing agents to communicate directly based on predefined protocols. Any agent can transfer control to any other through explicit handoff mechanisms.
|
|
@@ -137,17 +137,17 @@ Disadvantages: Coordination overhead between layers, potential for misalignment
|
|
|
137
137
|
|
|
138
138
|
### Context Isolation as Design Principle
|
|
139
139
|
|
|
140
|
-
The primary purpose of multi-agent architectures is context isolation. Each
|
|
140
|
+
The primary purpose of multi-agent architectures is context isolation. Each Task agent operates in a clean context window focused on its subtask without carrying accumulated context from other subtasks.
|
|
141
141
|
|
|
142
142
|
**Isolation Mechanisms**
|
|
143
|
-
Full context delegation: For complex tasks where the
|
|
143
|
+
Full context delegation: For complex tasks where the Task agent needs complete understanding, the planner shares its entire context. The Task agent has its own tools and instructions but receives full context for its decisions.
|
|
144
144
|
|
|
145
|
-
Instruction passing: For simple, well-defined subtasks, the planner creates instructions via function call. The
|
|
145
|
+
Instruction passing: For simple, well-defined subtasks, the planner creates instructions via function call. The Task agent receives only the instructions needed for its specific task.
|
|
146
146
|
|
|
147
147
|
File system memory: For complex tasks requiring shared state, agents read and write to persistent storage. The file system serves as the coordination mechanism, avoiding context bloat from shared state passing.
|
|
148
148
|
|
|
149
149
|
**Isolation Trade-offs**
|
|
150
|
-
Full context delegation provides maximum capability but defeats the purpose of
|
|
150
|
+
Full context delegation provides maximum capability but defeats the purpose of Task agents. Instruction passing maintains isolation but limits Task agent flexibility. File system memory enables shared state without context passing but introduces latency and consistency challenges.
|
|
151
151
|
|
|
152
152
|
The right choice depends on task complexity, coordination needs, and acceptable latency.
|
|
153
153
|
|
|
@@ -31,7 +31,7 @@ Build and deploy the same feature consistently across web, mobile, and desktop p
|
|
|
31
31
|
## Phase 1: Architecture and API Design (Sequential)
|
|
32
32
|
|
|
33
33
|
### 1. Define Feature Requirements and API Contracts
|
|
34
|
-
- Use Task tool with subagent_type="
|
|
34
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
35
35
|
- Prompt: "Design the API contract for feature: $ARGUMENTS. Create OpenAPI 3.1 specification with:
|
|
36
36
|
- RESTful endpoints with proper HTTP methods and status codes
|
|
37
37
|
- GraphQL schema if applicable for complex data queries
|
|
@@ -44,7 +44,7 @@ Build and deploy the same feature consistently across web, mobile, and desktop p
|
|
|
44
44
|
- Expected output: Complete API specification, data models, and integration guidelines
|
|
45
45
|
|
|
46
46
|
### 2. Design System and UI/UX Consistency
|
|
47
|
-
- Use Task tool with subagent_type="
|
|
47
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
48
48
|
- Prompt: "Create cross-platform design system for feature using API spec: [previous output]. Include:
|
|
49
49
|
- Component specifications for each platform (Material Design, iOS HIG, Fluent)
|
|
50
50
|
- Responsive layouts for web (mobile-first approach)
|
|
@@ -57,7 +57,7 @@ Build and deploy the same feature consistently across web, mobile, and desktop p
|
|
|
57
57
|
- Expected output: Design system documentation, component library specs, platform guidelines
|
|
58
58
|
|
|
59
59
|
### 3. Shared Business Logic Architecture
|
|
60
|
-
- Use Task tool with subagent_type="
|
|
60
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
61
61
|
- Prompt: "Design shared business logic architecture for cross-platform feature. Define:
|
|
62
62
|
- Core domain models and entities (platform-agnostic)
|
|
63
63
|
- Business rules and validation logic
|
|
@@ -72,7 +72,7 @@ Build and deploy the same feature consistently across web, mobile, and desktop p
|
|
|
72
72
|
## Phase 2: Parallel Platform Implementation
|
|
73
73
|
|
|
74
74
|
### 4a. Web Implementation (React/Next.js)
|
|
75
|
-
- Use Task tool with subagent_type="
|
|
75
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
76
76
|
- Prompt: "Implement web version of feature using:
|
|
77
77
|
- React 18+ with Next.js 14+ App Router
|
|
78
78
|
- TypeScript for type safety
|
|
@@ -87,7 +87,7 @@ Build and deploy the same feature consistently across web, mobile, and desktop p
|
|
|
87
87
|
- Expected output: Complete web implementation with tests
|
|
88
88
|
|
|
89
89
|
### 4b. iOS Implementation (SwiftUI)
|
|
90
|
-
- Use Task tool with subagent_type="
|
|
90
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
91
91
|
- Prompt: "Implement iOS version using:
|
|
92
92
|
- SwiftUI with iOS 17+ features
|
|
93
93
|
- Swift 5.9+ with async/await
|
|
@@ -102,7 +102,7 @@ Build and deploy the same feature consistently across web, mobile, and desktop p
|
|
|
102
102
|
- Expected output: Native iOS implementation with unit/UI tests
|
|
103
103
|
|
|
104
104
|
### 4c. Android Implementation (Kotlin/Compose)
|
|
105
|
-
- Use Task tool with subagent_type="
|
|
105
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
106
106
|
- Prompt: "Implement Android version using:
|
|
107
107
|
- Jetpack Compose with Material 3
|
|
108
108
|
- Kotlin coroutines and Flow
|
|
@@ -117,7 +117,7 @@ Build and deploy the same feature consistently across web, mobile, and desktop p
|
|
|
117
117
|
- Expected output: Native Android implementation with tests
|
|
118
118
|
|
|
119
119
|
### 4d. Desktop Implementation (Optional - Electron/Tauri)
|
|
120
|
-
- Use Task tool with subagent_type="
|
|
120
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
121
121
|
- Prompt: "Implement desktop version using Tauri 2.0 or Electron with:
|
|
122
122
|
- Shared web codebase where possible
|
|
123
123
|
- Native OS integration (system tray, notifications)
|
|
@@ -133,7 +133,7 @@ Build and deploy the same feature consistently across web, mobile, and desktop p
|
|
|
133
133
|
## Phase 3: Integration and Validation
|
|
134
134
|
|
|
135
135
|
### 5. API Documentation and Testing
|
|
136
|
-
- Use Task tool with subagent_type="
|
|
136
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
137
137
|
- Prompt: "Create comprehensive API documentation including:
|
|
138
138
|
- Interactive OpenAPI/Swagger documentation
|
|
139
139
|
- Platform-specific integration guides
|
|
@@ -149,7 +149,7 @@ Build and deploy the same feature consistently across web, mobile, and desktop p
|
|
|
149
149
|
- Expected output: Complete API documentation portal, test results
|
|
150
150
|
|
|
151
151
|
### 6. Cross-Platform Testing and Feature Parity
|
|
152
|
-
- Use Task tool with subagent_type="
|
|
152
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
153
153
|
- Prompt: "Validate feature parity across all platforms:
|
|
154
154
|
- Functional testing matrix (features work identically)
|
|
155
155
|
- UI consistency verification (follows design system)
|
|
@@ -164,7 +164,7 @@ Build and deploy the same feature consistently across web, mobile, and desktop p
|
|
|
164
164
|
- Expected output: Test report, parity matrix, performance metrics
|
|
165
165
|
|
|
166
166
|
### 7. Platform-Specific Optimizations
|
|
167
|
-
- Use Task tool with subagent_type="
|
|
167
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
168
168
|
- Prompt: "Optimize each platform implementation:
|
|
169
169
|
- Web: Bundle size, lazy loading, CDN setup, SEO
|
|
170
170
|
- iOS: App size, launch time, memory usage, battery
|
|
@@ -20,7 +20,7 @@ You are an expert in Nest.js with deep knowledge of enterprise-grade Node.js app
|
|
|
20
20
|
- Node.js runtime issues → nodejs-expert
|
|
21
21
|
- Frontend React issues → react-expert
|
|
22
22
|
|
|
23
|
-
Example: "This is a TypeScript type system issue. Use the typescript-type-expert
|
|
23
|
+
Example: "This is a TypeScript type system issue. Use the typescript-type-expert Task agent. Stopping here."
|
|
24
24
|
|
|
25
25
|
1. Detect Nest.js project setup using internal tools first (Read, Grep, Glob)
|
|
26
26
|
2. Identify architecture patterns and existing modules
|
|
@@ -59,7 +59,7 @@ The Multi-Agent Review Tool leverages a distributed, specialized agent network t
|
|
|
59
59
|
- **Dynamic Agent Matching**:
|
|
60
60
|
- Analyze input characteristics
|
|
61
61
|
- Select most appropriate agent types
|
|
62
|
-
- Configure specialized
|
|
62
|
+
- Configure specialized Task agents dynamically
|
|
63
63
|
- **Expertise Routing**:
|
|
64
64
|
```python
|
|
65
65
|
def route_agents(code_context):
|
|
@@ -103,7 +103,7 @@ RULES:
|
|
|
103
103
|
```
|
|
104
104
|
┌─────────────────────────────────┐
|
|
105
105
|
│ PLANNER AGENT │
|
|
106
|
-
│ └─ Assigns tasks to
|
|
106
|
+
│ └─ Assigns tasks to Task agents │
|
|
107
107
|
├─────────────────────────────────┤
|
|
108
108
|
│ KNOWLEDGE MANAGER │
|
|
109
109
|
│ └─ Reviews conversations │
|
|
@@ -115,7 +115,7 @@ RULES:
|
|
|
115
115
|
└─────────────────────────────────┘
|
|
116
116
|
```
|
|
117
117
|
|
|
118
|
-
**Key Insight:** Manus originally used `todo.md` for task planning but found ~33% of actions were spent updating it. Shifted to dedicated planner agent calling executor
|
|
118
|
+
**Key Insight:** Manus originally used `todo.md` for task planning but found ~33% of actions were spent updating it. Shifted to dedicated planner agent calling executor Task agents.
|
|
119
119
|
|
|
120
120
|
### Strategy 3: Context Offloading
|
|
121
121
|
|
|
@@ -7,14 +7,14 @@ source: community
|
|
|
7
7
|
|
|
8
8
|
# Requesting Code Review
|
|
9
9
|
|
|
10
|
-
Dispatch superpowers:code-reviewer
|
|
10
|
+
Dispatch superpowers:code-reviewer Task agent to catch issues before they cascade.
|
|
11
11
|
|
|
12
12
|
**Core principle:** Review early, review often.
|
|
13
13
|
|
|
14
14
|
## When to Request Review
|
|
15
15
|
|
|
16
16
|
**Mandatory:**
|
|
17
|
-
- After each task in
|
|
17
|
+
- After each task in Task agent-driven development
|
|
18
18
|
- After completing major feature
|
|
19
19
|
- Before merge to main
|
|
20
20
|
|
|
@@ -31,7 +31,7 @@ BASE_SHA=$(git rev-parse HEAD~1) # or origin/main
|
|
|
31
31
|
HEAD_SHA=$(git rev-parse HEAD)
|
|
32
32
|
```
|
|
33
33
|
|
|
34
|
-
**2. Dispatch code-reviewer
|
|
34
|
+
**2. Dispatch code-reviewer Task agent:**
|
|
35
35
|
|
|
36
36
|
Use Task tool with superpowers:code-reviewer type, fill template at `code-reviewer.md`
|
|
37
37
|
|
|
@@ -58,14 +58,14 @@ You: Let me request code review before proceeding.
|
|
|
58
58
|
BASE_SHA=$(git log --oneline | grep "Task 1" | head -1 | awk '{print $1}')
|
|
59
59
|
HEAD_SHA=$(git rev-parse HEAD)
|
|
60
60
|
|
|
61
|
-
[Dispatch superpowers:code-reviewer
|
|
61
|
+
[Dispatch superpowers:code-reviewer Task agent]
|
|
62
62
|
WHAT_WAS_IMPLEMENTED: Verification and repair functions for conversation index
|
|
63
63
|
PLAN_OR_REQUIREMENTS: Task 2 from docs/plans/deployment-plan.md
|
|
64
64
|
BASE_SHA: a7981ec
|
|
65
65
|
HEAD_SHA: 3df7661
|
|
66
66
|
DESCRIPTION: Added verifyIndex() and repairIndex() with 4 issue types
|
|
67
67
|
|
|
68
|
-
[
|
|
68
|
+
[Task agent returns]:
|
|
69
69
|
Strengths: Clean architecture, real tests
|
|
70
70
|
Issues:
|
|
71
71
|
Important: Missing progress indicators
|
|
@@ -78,7 +78,7 @@ You: [Fix progress indicators]
|
|
|
78
78
|
|
|
79
79
|
## Integration with Workflows
|
|
80
80
|
|
|
81
|
-
**
|
|
81
|
+
**Task Agent-Driven Development:**
|
|
82
82
|
- Review after EACH task
|
|
83
83
|
- Catch issues before they compound
|
|
84
84
|
- Fix before moving to next task
|
|
@@ -36,19 +36,19 @@ Implement comprehensive security hardening with defense-in-depth strategy throug
|
|
|
36
36
|
## Phase 1: Comprehensive Security Assessment
|
|
37
37
|
|
|
38
38
|
### 1. Initial Vulnerability Scanning
|
|
39
|
-
- Use Task tool with subagent_type="
|
|
39
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
40
40
|
- Prompt: "Perform comprehensive security assessment on: $ARGUMENTS. Execute SAST analysis with Semgrep/SonarQube, DAST scanning with OWASP ZAP, dependency audit with Snyk/Trivy, secrets detection with GitLeaks/TruffleHog. Generate SBOM for supply chain analysis. Identify OWASP Top 10 vulnerabilities, CWE weaknesses, and CVE exposures."
|
|
41
41
|
- Output: Detailed vulnerability report with CVSS scores, exploitability analysis, attack surface mapping, secrets exposure report, SBOM inventory
|
|
42
42
|
- Context: Initial baseline for all remediation efforts
|
|
43
43
|
|
|
44
44
|
### 2. Threat Modeling and Risk Analysis
|
|
45
|
-
- Use Task tool with subagent_type="
|
|
45
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
46
46
|
- Prompt: "Conduct threat modeling using STRIDE methodology for: $ARGUMENTS. Analyze attack vectors, create attack trees, assess business impact of identified vulnerabilities. Map threats to MITRE ATT&CK framework. Prioritize risks based on likelihood and impact."
|
|
47
47
|
- Output: Threat model diagrams, risk matrix with prioritized vulnerabilities, attack scenario documentation, business impact analysis
|
|
48
48
|
- Context: Uses vulnerability scan results to inform threat priorities
|
|
49
49
|
|
|
50
50
|
### 3. Architecture Security Review
|
|
51
|
-
- Use Task tool with subagent_type="
|
|
51
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
52
52
|
- Prompt: "Review architecture for security weaknesses in: $ARGUMENTS. Evaluate service boundaries, data flow security, authentication/authorization architecture, encryption implementation, network segmentation. Design zero-trust architecture patterns. Reference threat model and vulnerability findings."
|
|
53
53
|
- Output: Security architecture assessment, zero-trust design recommendations, service mesh security requirements, data classification matrix
|
|
54
54
|
- Context: Incorporates threat model to address architectural vulnerabilities
|
|
@@ -56,25 +56,25 @@ Implement comprehensive security hardening with defense-in-depth strategy throug
|
|
|
56
56
|
## Phase 2: Vulnerability Remediation
|
|
57
57
|
|
|
58
58
|
### 4. Critical Vulnerability Fixes
|
|
59
|
-
- Use Task tool with subagent_type="
|
|
59
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
60
60
|
- Prompt: "Coordinate immediate remediation of critical vulnerabilities (CVSS 7+) in: $ARGUMENTS. Fix SQL injections with parameterized queries, XSS with output encoding, authentication bypasses with secure session management, insecure deserialization with input validation. Apply security patches for CVEs."
|
|
61
61
|
- Output: Patched code with vulnerability fixes, security patch documentation, regression test requirements
|
|
62
62
|
- Context: Addresses high-priority items from vulnerability assessment
|
|
63
63
|
|
|
64
64
|
### 5. Backend Security Hardening
|
|
65
|
-
- Use Task tool with subagent_type="
|
|
65
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
66
66
|
- Prompt: "Implement comprehensive backend security controls for: $ARGUMENTS. Add input validation with OWASP ESAPI, implement rate limiting and DDoS protection, secure API endpoints with OAuth2/JWT validation, add encryption for data at rest/transit using AES-256/TLS 1.3. Implement secure logging without PII exposure."
|
|
67
67
|
- Output: Hardened API endpoints, validation middleware, encryption implementation, secure configuration templates
|
|
68
68
|
- Context: Builds upon vulnerability fixes with preventive controls
|
|
69
69
|
|
|
70
70
|
### 6. Frontend Security Implementation
|
|
71
|
-
- Use Task tool with subagent_type="
|
|
71
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
72
72
|
- Prompt: "Implement frontend security measures for: $ARGUMENTS. Configure CSP headers with nonce-based policies, implement XSS prevention with DOMPurify, secure authentication flows with PKCE OAuth2, add SRI for external resources, implement secure cookie handling with SameSite/HttpOnly/Secure flags."
|
|
73
73
|
- Output: Secure frontend components, CSP policy configuration, authentication flow implementation, security headers configuration
|
|
74
74
|
- Context: Complements backend security with client-side protections
|
|
75
75
|
|
|
76
76
|
### 7. Mobile Security Hardening
|
|
77
|
-
- Use Task tool with subagent_type="
|
|
77
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
78
78
|
- Prompt: "Implement mobile app security for: $ARGUMENTS. Add certificate pinning, implement biometric authentication, secure local storage with encryption, obfuscate code with ProGuard/R8, implement anti-tampering and root/jailbreak detection, secure IPC communications."
|
|
79
79
|
- Output: Hardened mobile application, security configuration files, obfuscation rules, certificate pinning implementation
|
|
80
80
|
- Context: Extends security to mobile platforms if applicable
|
|
@@ -82,19 +82,19 @@ Implement comprehensive security hardening with defense-in-depth strategy throug
|
|
|
82
82
|
## Phase 3: Security Controls Implementation
|
|
83
83
|
|
|
84
84
|
### 8. Authentication and Authorization Enhancement
|
|
85
|
-
- Use Task tool with subagent_type="
|
|
85
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
86
86
|
- Prompt: "Implement modern authentication system for: $ARGUMENTS. Deploy OAuth2/OIDC with PKCE, implement MFA with TOTP/WebAuthn/FIDO2, add risk-based authentication, implement RBAC/ABAC with principle of least privilege, add session management with secure token rotation."
|
|
87
87
|
- Output: Authentication service configuration, MFA implementation, authorization policies, session management system
|
|
88
88
|
- Context: Strengthens access controls based on architecture review
|
|
89
89
|
|
|
90
90
|
### 9. Infrastructure Security Controls
|
|
91
|
-
- Use Task tool with subagent_type="
|
|
91
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
92
92
|
- Prompt: "Deploy infrastructure security controls for: $ARGUMENTS. Configure WAF rules for OWASP protection, implement network segmentation with micro-segmentation, deploy IDS/IPS systems, configure cloud security groups and NACLs, implement DDoS protection with rate limiting and geo-blocking."
|
|
93
93
|
- Output: WAF configuration, network security policies, IDS/IPS rules, cloud security configurations
|
|
94
94
|
- Context: Implements network-level defenses
|
|
95
95
|
|
|
96
96
|
### 10. Secrets Management Implementation
|
|
97
|
-
- Use Task tool with subagent_type="
|
|
97
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
98
98
|
- Prompt: "Implement enterprise secrets management for: $ARGUMENTS. Deploy HashiCorp Vault or AWS Secrets Manager, implement secret rotation policies, remove hardcoded secrets, configure least-privilege IAM roles, implement encryption key management with HSM support."
|
|
99
99
|
- Output: Secrets management configuration, rotation policies, IAM role definitions, key management procedures
|
|
100
100
|
- Context: Eliminates secrets exposure vulnerabilities
|
|
@@ -102,19 +102,19 @@ Implement comprehensive security hardening with defense-in-depth strategy throug
|
|
|
102
102
|
## Phase 4: Validation and Compliance
|
|
103
103
|
|
|
104
104
|
### 11. Penetration Testing and Validation
|
|
105
|
-
- Use Task tool with subagent_type="
|
|
105
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
106
106
|
- Prompt: "Execute comprehensive penetration testing for: $ARGUMENTS. Perform authenticated and unauthenticated testing, API security testing, business logic testing, privilege escalation attempts. Use Burp Suite, Metasploit, and custom exploits. Validate all security controls effectiveness."
|
|
107
107
|
- Output: Penetration test report, proof-of-concept exploits, remediation validation, security control effectiveness metrics
|
|
108
108
|
- Context: Validates all implemented security measures
|
|
109
109
|
|
|
110
110
|
### 12. Compliance and Standards Verification
|
|
111
|
-
- Use Task tool with subagent_type="
|
|
111
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
112
112
|
- Prompt: "Verify compliance with security frameworks for: $ARGUMENTS. Validate against OWASP ASVS Level 2, CIS Benchmarks, SOC2 Type II requirements, GDPR/CCPA privacy controls, HIPAA/PCI-DSS if applicable. Generate compliance attestation reports."
|
|
113
113
|
- Output: Compliance assessment report, gap analysis, remediation requirements, audit evidence collection
|
|
114
114
|
- Context: Ensures regulatory and industry standard compliance
|
|
115
115
|
|
|
116
116
|
### 13. Security Monitoring and SIEM Integration
|
|
117
|
-
- Use Task tool with subagent_type="
|
|
117
|
+
- Use Task tool with subagent_type="general-purpose"
|
|
118
118
|
- Prompt: "Implement security monitoring and SIEM for: $ARGUMENTS. Deploy Splunk/ELK/Sentinel integration, configure security event correlation, implement behavioral analytics for anomaly detection, set up automated incident response playbooks, create security dashboards and alerting."
|
|
119
119
|
- Output: SIEM configuration, correlation rules, incident response playbooks, security dashboards, alert definitions
|
|
120
120
|
- Context: Establishes continuous security monitoring
|