agent-toolkit-cli 1.24.0__tar.gz → 1.26.0__tar.gz

agent_toolkit_cli-1.26.0/.gitignore

@@ -0,0 +1,46 @@
+# Python
+__pycache__/
+*.py[cod]
+.venv/
+*.egg-info/
+
+# Node
+node_modules/
+
+# OS
+.DS_Store
+*.swp
+
+# Secrets - never commit
+*.env
+.env.*
+!.env.example
+
+# Build artifacts
+dist/
+build/
+# Precompiled make.vsh (`./make.vsh compile-make`)
+/make
+packages/pypi/agent-toolkit-cli/src/agent_toolkit/bin/agent-toolkit
+packages/pypi/agent-toolkit-cli/src/agent_toolkit/bin/agent-toolkit.exe
+packages/pypi/agent-toolkit-cli/.venv/
+packages/pypi/agent-toolkit-cli/uv.lock
+packages/npm/*/bin/agent-toolkit
+packages/npm/*/bin/agent-toolkit.exe
+
+# Editor
+.idea/
+.vscode/settings.json
+# Loop run artifacts (machine-specific state)
+loops/*/runs/
+loops/*/STATE.md
+
+# Git worktrees
+.worktrees/
+modules/.cache/
+capabilities/upstream-apply-summary.json
+
+# Server runtime state (jobs, logs)
+.agent-toolkit/
+scripts/swarm-visual/.venv/
+knowledge/learnings/

agent_toolkit_cli-1.26.0/PKG-INFO

@@ -0,0 +1,370 @@
+Metadata-Version: 2.5
+Name: agent-toolkit-cli
+Version: 1.26.0
+Summary: Composable AI agent toolkit — loops, skills, profiles, and MCP for Claude Code, Cursor, OpenCode, Windsurf, and more
+Project-URL: Homepage, https://github.com/ulises-jeremias/agent-toolkit
+Project-URL: Documentation, https://github.com/ulises-jeremias/agent-toolkit/tree/main/docs
+Project-URL: Repository, https://github.com/ulises-jeremias/agent-toolkit.git
+Project-URL: Issues, https://github.com/ulises-jeremias/agent-toolkit/issues
+Project-URL: Changelog, https://github.com/ulises-jeremias/agent-toolkit/blob/main/CHANGELOG.md
+Project-URL: PyPI, https://pypi.org/project/agent-toolkit-cli/
+License: MIT License
+        
+        Copyright (c) 2026 Ulises Jeremias
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+License-File: LICENSE
+Keywords: agent-toolkit,agent-toolkit-cli,ai-agents,claude-code,cursor,github-copilot,loops,mcp,opencode,skills,windsurf
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Classifier: Topic :: Software Development :: Libraries :: Application Frameworks
+Requires-Python: >=3.10
+Provides-Extra: dev
+Requires-Dist: jsonschema>=4.26.0; extra == 'dev'
+Requires-Dist: pytest-cov>=7.1.0; extra == 'dev'
+Requires-Dist: pytest>=9.1.1; extra == 'dev'
+Requires-Dist: pyyaml>=6.0.3; extra == 'dev'
+Requires-Dist: ruff>=0.16.1; extra == 'dev'
+Description-Content-Type: text/markdown
+
+<p align="center">
+  <img src="https://github.com/ulises-jeremias/agent-toolkit/blob/main/static/banner.svg?raw=true" width="100%" alt="agent-toolkit banner">
+</p>
+
+<div align="center">
+
+# agent-toolkit-cli
+
+**The official CLI for [agent-toolkit](https://github.com/ulises-jeremias/agent-toolkit)** — install skills, agents, loops, and MCP configs across every major AI coding assistant.
+
+[![PyPI](https://img.shields.io/pypi/v/agent-toolkit-cli?style=flat&labelColor=1f2937&color=7c3aed)](https://pypi.org/project/agent-toolkit-cli/)
+[![PyPI downloads](https://img.shields.io/pypi/dm/agent-toolkit-cli?style=flat&label=downloads&labelColor=1f2937&color=0891b2)](https://pypi.org/project/agent-toolkit-cli/)
+[![Python](https://img.shields.io/pypi/pyversions/agent-toolkit-cli?style=flat&labelColor=1f2937)](https://pypi.org/project/agent-toolkit-cli/)
+[![License: MIT](https://img.shields.io/badge/license-MIT-7c3aed?style=flat&labelColor=1f2937)](https://github.com/ulises-jeremias/agent-toolkit/blob/main/LICENSE)
+[![Validate](https://img.shields.io/github/actions/workflow/status/ulises-jeremias/agent-toolkit/validate.yml?branch=main&label=validate&style=flat&labelColor=1f2937)](https://github.com/ulises-jeremias/agent-toolkit/actions/workflows/validate.yml)
+[![Release](https://img.shields.io/github/v/release/ulises-jeremias/agent-toolkit?style=flat&label=release&labelColor=1f2937&color=16a34a)](https://github.com/ulises-jeremias/agent-toolkit/releases/latest)
+
+[![npm](https://img.shields.io/npm/v/agent-toolkit-cli?style=flat&label=npm&labelColor=1f2937&color=7c3aed&logo=npm&logoColor=white)](https://www.npmjs.com/package/agent-toolkit-cli)
+[![AUR](https://img.shields.io/aur/version/agent-toolkit-bin?style=flat&label=AUR&labelColor=1f2937&logo=archlinux&logoColor=white)](https://aur.archlinux.org/packages/agent-toolkit-bin)
+[![Homebrew](https://img.shields.io/badge/Homebrew-ulises--jeremias%2Ftap-ea580c?style=flat&labelColor=1f2937&logo=homebrew&logoColor=white)](https://github.com/ulises-jeremias/homebrew-tap)
+[![GHCR](https://img.shields.io/badge/GHCR-agent--toolkit-2563eb?style=flat&labelColor=1f2937&logo=docker&logoColor=white)](https://github.com/ulises-jeremias/agent-toolkit/pkgs/container/agent-toolkit)
+[![Discord](https://img.shields.io/discord/1527933660764831825?style=flat&label=Discord&labelColor=1f2937&logo=discord&logoColor=white&color=5865F2)](https://discord.gg/bR5VyATgka)
+
+![skills](https://img.shields.io/badge/skills-80-7c3aed?style=flat&labelColor=1f2937)
+![agents](https://img.shields.io/badge/agents-17-0891b2?style=flat&labelColor=1f2937)
+![loops](https://img.shields.io/badge/loops-10-ea580c?style=flat&labelColor=1f2937)
+
+[![Claude Code](https://img.shields.io/badge/Claude%20Code-plugin-7c3aed?style=flat&labelColor=1f2937&logo=anthropic&logoColor=white)](https://github.com/ulises-jeremias/agent-toolkit/tree/main/profiles/claude-code)
+[![Cursor](https://img.shields.io/badge/Cursor-rules-0891b2?style=flat&labelColor=1f2937)](https://github.com/ulises-jeremias/agent-toolkit/tree/main/profiles/cursor)
+[![OpenCode](https://img.shields.io/badge/OpenCode-agents-ea580c?style=flat&labelColor=1f2937)](https://github.com/ulises-jeremias/agent-toolkit/tree/main/profiles/opencode)
+[![Copilot](https://img.shields.io/badge/GitHub%20Copilot-instructions-16a34a?style=flat&labelColor=1f2937&logo=github&logoColor=white)](https://github.com/ulises-jeremias/agent-toolkit/tree/main/profiles/copilot)
+[![Windsurf](https://img.shields.io/badge/Windsurf-rules-2563eb?style=flat&labelColor=1f2937)](https://github.com/ulises-jeremias/agent-toolkit/tree/main/profiles/windsurf)
+[![Pi](https://img.shields.io/badge/Pi%20Agent-skills-db2777?style=flat&labelColor=1f2937)](https://github.com/ulises-jeremias/agent-toolkit/tree/main/profiles/pi)
+[![Muse Code](https://img.shields.io/badge/Muse%20Code-skills-ff6b35?style=flat&labelColor=1f2937)](https://developer.meta.com/ai/products/muse-code/)
+
+[Monorepo](https://github.com/ulises-jeremias/agent-toolkit) ·
+[Docs](https://github.com/ulises-jeremias/agent-toolkit/tree/main/docs) ·
+[Installation](https://github.com/ulises-jeremias/agent-toolkit/blob/main/docs/INSTALLATION.md) ·
+[CLI surfaces](https://github.com/ulises-jeremias/agent-toolkit/blob/main/docs/CLI_SURFACES.md) ·
+[Changelog](https://github.com/ulises-jeremias/agent-toolkit/blob/main/CHANGELOG.md)
+
+</div>
+
+---
+
+## What is this package?
+
+`agent-toolkit-cli` is the **PyPI adapter** for the agent-toolkit monorepo ([ADR-021](https://github.com/ulises-jeremias/agent-toolkit/blob/main/docs/adrs/ADR-021-pypi-binary.md)). Platform wheels bundle the native V binary; `agent-toolkit` / `agent-toolkit-cli` are a thin trampoline (same idea as the npm package). There is no Python CLI fallback — see [python-fallback.md](https://github.com/ulises-jeremias/agent-toolkit/blob/main/docs/v/python-fallback.md).
+
+It also ships:
+
+- bundled skills, agents, loops, profiles, packs, and MCP templates
+- install / doctor / sync workflows that deploy the right artifacts per AI tool
+
+One CLI. Any coding assistant. Zero duplication.
+
+```bash
+uvx --from agent-toolkit-cli agent-toolkit install
+agent-toolkit doctor
+```
+
+<div align="center">
+<img src="https://github.com/ulises-jeremias/agent-toolkit/blob/main/static/architecture.svg?raw=true" width="88%" alt="agent-toolkit architecture">
+</div>
+
+---
+
+## Quick start
+
+**Recommended:** [uv](https://docs.astral.sh/uv/) — no permanent install required.
+
+```bash
+# One-shot (preferred)
+uvx --from agent-toolkit-cli agent-toolkit install
+uvx --from agent-toolkit-cli agent-toolkit doctor
+
+# Or install the CLI persistently
+uv tool install agent-toolkit-cli
+agent-toolkit install    # auto-detects Claude, Cursor, OpenCode, Windsurf, Pi, Copilot
+agent-toolkit doctor
+```
+
+### Other installers
+
+```bash
+pip install agent-toolkit-cli
+pipx install agent-toolkit-cli
+
+# System packages (release notify → dedicated taps)
+brew tap ulises-jeremias/homebrew-tap && brew install agent-toolkit
+yay -S agent-toolkit-bin   # Arch Linux (AUR) — GitHub Release V binary; not the Python AUR package
+docker pull ghcr.io/ulises-jeremias/agent-toolkit
+```
+
+Full walkthrough: [docs/INSTALLATION.md](https://github.com/ulises-jeremias/agent-toolkit/blob/main/docs/INSTALLATION.md)
+
+---
+
+## Key concepts
+
+<table>
+  <tr>
+    <td width="50%" valign="top">
+      <h3>🛠️ Skills</h3>
+      <sub>Reusable capability units (<code>SKILL.md</code>) that teach an agent how to do a job — delivery, forge CLIs, design, data, ops.</sub>
+      <br><br>
+      <sub>80 skills across domains. Browse with <code>agent-toolkit inventory</code> or <code>agent-toolkit skills list</code>.</sub>
+    </td>
+    <td width="50%" valign="top">
+      <h3>🤖 Agents</h3>
+      <sub>Personas that constrain <em>how</em> the AI works — review, plan, architect, fix CI — without rewriting prompts each time.</sub>
+      <br><br>
+      <sub>17 personas, compiled into each target's native format via <code>install</code>.</sub>
+    </td>
+  </tr>
+  <tr>
+    <td width="50%" valign="top">
+      <h3>🔄 Loops</h3>
+      <sub>Recurring agentic workflows with mutation-safety tiers (L1 observe → L2 controlled → L3 high autonomy).</sub>
+      <br><br>
+      <sub><code>agent-toolkit loop run daily-triage</code> · 10 bundled templates</sub>
+    </td>
+    <td width="50%" valign="top">
+      <h3>🔗 MCP</h3>
+      <sub>Provider registry + ready templates (GitHub, Slack, Notion, Linear, Figma, ClickUp) emitted into target-native configs.</sub>
+      <br><br>
+      <sub><code>agent-toolkit mcp list</code> · <code>mcp setup &lt;provider&gt;</code> · <code>mcp doctor</code></sub>
+    </td>
+  </tr>
+</table>
+
+---
+
+## Supported tools
+
+<div align="center">
+<img src="https://github.com/ulises-jeremias/agent-toolkit/blob/main/static/tools-grid.svg?raw=true" width="96%" alt="Supported AI tools grid">
+</div>
+
+| Tool | What `install` deploys |
+|------|------------------------|
+| **Claude Code** | Plugin manifest, skill references, settings |
+| **Cursor** | Marketplace plugins + `.mdc` rules (IDE + Agent CLI) |
+| **OpenCode** | System prompt overlays, agent configs |
+| **GitHub Copilot** | `copilot-instructions.md` with domain selection |
+| **Windsurf** | Rules and memory files via Cascade (`~/.codeium/windsurf/`) |
+| **Pi Agent** | Skills and loop templates in Pi's native format |
+| **Muse Code** | Agent Skills under `~/.config/muse/skills/` |
+
+```bash
+# Target specific tools
+agent-toolkit install --tools claude-code,cursor
+agent-toolkit install --dry-run
+agent-toolkit install --force
+```
+
+---
+
+## Command reference
+
+Everyday **consumer** commands vs **advanced** workstation / harness commands.
+Details: [docs/CLI_SURFACES.md](https://github.com/ulises-jeremias/agent-toolkit/blob/main/docs/CLI_SURFACES.md)
+
+### Consumer
+
+| Command | Purpose |
+|---------|---------|
+| `install` | Install profiles for detected or selected AI tools |
+| `update` | Refresh installed profiles from latest toolkit data |
+| `uninstall` | Remove toolkit-owned files using install receipts |
+| `doctor` | Check toolkit data and tool availability |
+| `diff` | Show changes vs currently installed plugin bundles |
+| `skills` | Sync, list, and validate skills |
+| `mcp` | MCP provider setup, health, doctor, uninstall |
+| `plugin` | Plugin bundle sync and check |
+
+```bash
+agent-toolkit skills list
+agent-toolkit skills sync --tools claude-code,cursor
+agent-toolkit mcp setup github
+agent-toolkit doctor --fix
+```
+
+### Advanced
+
+Still on the same binary — start here when running an [agentic-harness](https://github.com/ulises-jeremias/agentic-harness)-style workspace:
+
+| Command | Purpose |
+|---------|---------|
+| `loop` | Loop engineering: init, run, status, audit, cost, schedule, sync |
+| `workspace` | Workspace scaffolding: init, context, personas, packs |
+| `memory` | Knowledge base: add, search, inject, review, todo |
+| `project` | Project index: clone, list, add, remove, scan |
+| `devcompanion` | Background job queue (`dc` alias) |
+| `insights` | Local usage analytics (OpenCode, Cursor, Claude) |
+| `inventory` | List skills, agents, and products |
+| `matrix` | Platform capability matrix |
+| `build` / `release` | Compile / release artifacts (maintainer) |
+
+```bash
+# Loops (mutation-safety tiers L1 → L3)
+agent-toolkit loop init daily-triage
+agent-toolkit loop run daily-triage
+agent-toolkit loop status
+agent-toolkit loop audit daily-triage
+
+# Workspace harness
+agent-toolkit workspace init --dir ~/.agentic-harness
+agent-toolkit memory search "topic"
+agent-toolkit project clone owner/my-repo
+agent-toolkit inventory
+```
+
+<div align="center">
+<img src="https://github.com/ulises-jeremias/agent-toolkit/blob/main/static/loop-tiers.svg?raw=true" width="88%" alt="Loop autonomy tiers">
+</div>
+
+| Tier | Posture | Examples |
+|------|---------|----------|
+| **L1** | Observe / propose (report-only) | `oss-daily-briefing`, `daily-triage`, `oss-triage` |
+| **L2** | Controlled mutations (PR-gated) | `ci-sweeper`, `dep-sweeper`, `pr-babysitter` |
+| **L3** | High autonomy (allowlist) | `oss-pr-monitor` |
+
+---
+
+## Optional dependencies
+
+```bash
+# YAML-backed pack / catalog features
+uv tool install "agent-toolkit-cli[yaml]"
+
+# Everything optional
+uv tool install "agent-toolkit-cli[all]"
+```
+
+| Extra | Provides |
+|-------|----------|
+| `yaml` | `PyYAML` for pack overlays and richer catalog parsing |
+| `all` | Currently same as `yaml` |
+| `dev` | `pytest`, `ruff` (contributors) |
+
+---
+
+## Upgrade & uninstall
+
+```bash
+uv tool upgrade agent-toolkit-cli
+agent-toolkit update          # refresh deployed profiles
+agent-toolkit uninstall       # remove toolkit-owned files via receipts
+
+uv tool uninstall agent-toolkit-cli
+# or: pip uninstall agent-toolkit-cli
+```
+
+→ [docs/UNINSTALL.md](https://github.com/ulises-jeremias/agent-toolkit/blob/main/docs/UNINSTALL.md)
+
+---
+
+## Ecosystem
+
+`agent-toolkit` is the **capability distribution layer (L1.5)** in a personal DX stack:
+
+| Layer | Repo | Role |
+|-------|------|------|
+| **L1** | [agentic-workstation](https://github.com/ulises-jeremias/agentic-workstation) | Machine provisioning — chezmoi, shell, packages, LLM policy |
+| **L1.5** | **agent-toolkit** (this CLI) | Skills, loops, profiles, MCP |
+| **L3** | [agentic-harness](https://github.com/ulises-jeremias/agentic-harness) | AI workspace scaffold — memory, personas, multi-repo orchestration |
+
+---
+
+## Documentation
+
+| Guide | Description |
+|-------|-------------|
+| [README (monorepo)](https://github.com/ulises-jeremias/agent-toolkit#readme) | Full product overview, skills, agents, packs |
+| [INSTALLATION.md](https://github.com/ulises-jeremias/agent-toolkit/blob/main/docs/INSTALLATION.md) | Install paths per tool |
+| [CLI_SURFACES.md](https://github.com/ulises-jeremias/agent-toolkit/blob/main/docs/CLI_SURFACES.md) | Consumer vs advanced commands |
+| [LOOPS.md](https://github.com/ulises-jeremias/agent-toolkit/blob/main/docs/LOOPS.md) | Loop engineering reference |
+| [TRUST.md](https://github.com/ulises-jeremias/agent-toolkit/blob/main/docs/TRUST.md) | Trust boundaries and supply chain |
+| [COMPATIBILITY.md](https://github.com/ulises-jeremias/agent-toolkit/blob/main/docs/COMPATIBILITY.md) | Python / tool matrix |
+| [Wiki](https://github.com/ulises-jeremias/agent-toolkit/wiki) | Extended reference |
+
+Canonical sources live in the [agent-toolkit monorepo](https://github.com/ulises-jeremias/agent-toolkit). This package is the installable distribution of that source of truth.
+
+---
+
+## Requirements
+
+- **Python** 3.10+
+- Optional: [uv](https://docs.astral.sh/uv/) for `uvx` / `uv tool` workflows
+- At least one supported AI coding assistant (for `install` to deploy profiles)
+
+---
+
+## Contributing
+
+Issues and PRs welcome on the monorepo:
+
+- [Contributing guide](https://github.com/ulises-jeremias/agent-toolkit/blob/main/CONTRIBUTING.md)
+- [Discord](https://discord.gg/bR5VyATgka)
+- Package changelog: [`CHANGELOG.md`](https://github.com/ulises-jeremias/agent-toolkit/blob/main/packages/pypi/agent-toolkit-cli/CHANGELOG.md)
+
+```bash
+git clone https://github.com/ulises-jeremias/agent-toolkit
+cd agent-toolkit
+uv sync --project packages/pypi/agent-toolkit-cli --all-extras
+uv run --project packages/pypi/agent-toolkit-cli --directory . agent-toolkit --help
+```
+
+---
+
+<div align="center">
+
+**MIT** © [ulises-jeremias](https://github.com/ulises-jeremias) · [PyPI](https://pypi.org/project/agent-toolkit-cli/) · [npm](https://www.npmjs.com/package/agent-toolkit-cli) · [AUR](https://aur.archlinux.org/packages/agent-toolkit-bin) · [GitHub](https://github.com/ulises-jeremias/agent-toolkit)
+
+</div>

agent_toolkit_cli-1.26.0/src/agent_toolkit/__init__.py

@@ -0,0 +1,4 @@
+"""agent-toolkit: Composable AI agent capabilities for all major AI coding tools."""
+
+__version__ = "1.26.0"
+__author__ = "ulises-jeremias"

agent_toolkit_cli-1.26.0/src/agent_toolkit/data/agents/agentic-security-reviewer/AGENT.md

@@ -0,0 +1,97 @@
+---
+name: agentic-security-reviewer
+description: Agentic security review specialist — prompt injection, tool poisoning, excessive agency, credential exposure, supply-chain, MCP/plugin hardening with OWASP LLM01-10 + AGNT01-06. Use when security-engineer delegates agentic surface or skill/MCP/hook changes warrant isolated audit; opt-in via holistic caller.
+tools: Read, Grep, Glob, Bash
+kind: specialist
+---
+
+You are **agentic-security-reviewer** at agent-toolkit. Identify agentic vulnerabilities before they reach production — distinct from security-reviewer (app code: SQLi, XSS, auth).
+
+## Agent vs skill rule — why agent (cite clause)
+- **Disjoint threat surface + unique expertise/permissions + explicit handoff:** Agentic surface (prompt injection, tool/MCP poisoning, excessive agency, supply-chain) is orthogonal to appsec; mixing risks checklist dilution. Benefits from narrow, independent hardening lifecycle distinct from holistic `security-engineer`'s STRIDE/app+agentic coordination. **Decision: KEEP AS SPECIALIST.**
+
+## When to use vs holistic
+- **Use this specialist** when `security-engineer` delegates per `agentic-security/*` (`mcp-audit`, `supply-chain-audit`, `owasp-agentic-review`, `threat-modeling` with `specialist_justified: true`) or change touches `skills/**/SKILL.md`, `agents/**`, `mcp/registry/*.yaml`, hooks/plugins. Chain: `Assistant → Security Engineer → Agentic Security Reviewer` (`docs/AGENT_TAXONOMY.md` §5 #9–10).
+- **Use `security-engineer` directly** for scoping STRIDE, coordinating app vs agentic findings, or when agentic checklist is not warranted.
+
+## Caller / skills / handoff
+- **Caller (holistic owner):** `security-engineer` (canonical) via `agentic-security/mcp-audit`, `agentic-security/supply-chain-audit`, `agentic-security/owasp-agentic-review`, `agentic-security/threat-modeling`; `assistant` routes to `security-engineer` first. See `capabilities/skills/registry.yaml` `specialist_agents: [agentic-security-reviewer]`.
+- **Skills used:** `agentic-security/owasp-agentic-review` (template + severity rubric), `agentic-security/mcp-audit`, `agentic-security/supply-chain-audit`, `agentic-security/threat-modeling`.
+- **Expected handoff:** Returns severity-ranked findings (`file:line` + OWASP ID + CVE + impact×likelihood + mitigation + residual risk) to `security-engineer`; `security-engineer` synthesizes with app findings and delegates craft to `reviewer` as needed.
+
+## When invoked
+
+1. Run git diff HEAD to see recent agentic changes (skills, agents, mcp/registry, hooks, plugins)
+2. Focus on agentic surface: prompt handling, tool use, MCP, provenance, agency, supply chain
+3. Check full context, not just diff — inspect mcp/registry/*.yaml, skills/**/SKILL.md, agents/**, capabilities/upstream.lock
+
+## Delegation (vs other reviewers)
+
+| Need | Delegate to |
+|------|-------------|
+| App/code vuln (OWASP Web: SQLi, XSS, IDOR) | security-reviewer |
+| System design tradeoffs | architect |
+| Agentic / prompt / tool / MCP / supply-chain (OWASP LLM01-10 + AGNT01-06) | you + skills/agentic-security/owasp-agentic-review |
+| Full supply-chain surface | agentic-security/supply-chain-audit (static Grep/Read; checkout/CI may use scripts/audit-capability.vsh) |
+| MCP config/impl | agentic-security/mcp-audit |
+| Threat model (STRIDE + agentic) | agentic-security/threat-modeling |
+
+## OWASP checklist (curated — map findings to IDs)
+
+LLM01 Prompt Injection — tool/skill instructions contain ignore previous/send secrets/exfiltrate//etc/passwd
+LLM02 Insecure Output Handling — LLM output concatenated into bash/curl/npx without allowlist
+LLM03 Training Data Poisoning — upstream.lock digest mismatch, NOASSERTION without review
+LLM04 Model DoS — skill loads 50k+ tokens unconditional; swarm unbounded
+LLM05 Supply Chain — unpinned latest without digest, unknown provenance
+LLM06 Sensitive Disclosure — hardcoded ghp_/xoxb/sk-, PII without placeholder
+LLM07 Insecure Plugin Design — hooks with dangerous_permissions without justification
+LLM08 Excessive Agency — agent can delete_file/push default/run shell without handshake
+LLM09 Overreliance — claims full WCAG AA / full security from automated alone
+LLM10 Model Theft — network_hosts includes *, exfiltrates via network + filesystem
+AGNT02 Tool Poisoning — MCP tool description hidden imperative
+AGNT04 Data Leakage via Tool Output — tool output PII forwarded to external MCP
+
+## Workflow
+
+1. Discover assets/trust boundaries/data flows/actors via git diff HEAD + mcp/registry/*.yaml
+2. Grep/Read for shell/network/mcp/hooks surface + scan for injection phrases + check upstream.lock digests (checkout/CI only: `./scripts/audit-capability.vsh --json`)
+3. Map each finding to LLM01-10 / AGNT01-06 + severity Critical/High/Med/Low + confidence + evidence + impact + likelihood + mitigation + residual risk
+4. Emit findings evidence-cited, no hallucination — delegate to owasp-agentic-review skill for template
+
+## Output format
+
+Critical: Fix immediately (prompt injection with exfiltration, hardcoded secret, SSRF to metadata)
+High: Fix before deployment (unpinned supply chain, excessive agency without handshake, tool poisoning)
+Medium: Fix next sprint (context-cost DoS, overreliance claim)
+Low: Consider (model theft via broad network_hosts)
+
+Include OWASP ID + CVE where applicable, e.g. LLM01 Prompt Injection (OWASP LLM Top 10 2025).
+
+## Output format — supplement
+
+### Agentic Security Review — <PR/surface>
+
+**Route:** why `agentic-security-reviewer` specialist vs holistic `security-engineer` inline
+**Surface / threat model:** assets, trust boundaries, data flows, actors (reuse `threat-modeling` where applicable)
+**Findings:** `file:line` + OWASP LLM/AGNT ID + CVE + severity/ confidence + evidence + impact×likelihood + mitigation + residual risk
+**Next:** handoff to `security-engineer` (synthesis) or `architect`/`reviewer` as applicable
+
+## Boundaries
+
+- Do not claim full compliance from automated checks alone — require manual judgment
+- Portable, no tool-specific leaks
+
+## Delegate to skills — supplement
+
+| Need | Skill |
+|------|-------|
+| Agentic OWASP (LLM01-10 + AGNT01-06) template | `agentic-security/owasp-agentic-review` |
+| Full supply-chain audit | `agentic-security/supply-chain-audit` |
+| STRIDE + agentic threat model | `agentic-security/threat-modeling` |
+
+## References
+- `capabilities/skills/registry.yaml` — `holistic_owner: security-engineer` + `specialist_agents: [agentic-security-reviewer]` + `specialist_justified: true`
+- `docs/AGENT_TAXONOMY.md` §3/§8 — `KEEP AS SPECIALIST` + `Assistant → Security Engineer → Agentic Security Reviewer`
+- `skills/core/assistant/references/ORCHESTRATION.md` — specialist (opt-in) table
+- `docs/HOW_TO_ADD_AGENT.md` — agent vs skill rule (disjoint surface/expertise/handoff = agent)
+- `agents/security-engineer/AGENT.md` — holistic caller; `agents/architect/AGENT.md` — threat-model collaborator

agent_toolkit_cli-1.26.0/src/agent_toolkit/data/agents/architect/AGENT.md

@@ -0,0 +1,82 @@
+---
+name: architect
+description: Software architecture and system design specialist. Use when designing systems, choosing patterns, evaluating technical approaches, or planning large-scale structural changes.
+tools: Read, Grep, Glob, Bash
+kind: holistic
+collaborates_with:
+  - data-engineer
+  - planner
+  - platform-engineer
+  - reviewer
+  - security-engineer
+---
+
+You are a software architect at agent-toolkit. Your role is to help with high-level design decisions, system architecture, and technical trade-off analysis.
+
+## When invoked
+1. Understand the current system by reading relevant files
+2. Identify the architectural context — tech stack, constraints, existing patterns
+3. Propose solutions with explicit trade-offs
+
+## Focus areas
+- SOLID principles and clean architecture
+- Scalability, maintainability, and testability
+- Design patterns appropriate to the context
+- Technology selection with rationale
+- Migration and refactoring strategies
+- API design and service boundaries
+- Data modeling decisions
+
+## Output format
+- **Context**: Brief summary of current state
+- **Options**: 2–3 alternatives with trade-offs
+- **Recommendation**: Preferred approach with rationale
+- **Risks**: Known risks and mitigations
+- **Next steps**: Concrete implementation steps
+
+Prefer simple solutions over clever ones. Document your reasoning. When uncertain, surface the trade-off rather than guessing.
+
+## Holistic owner — `architect` (per `capabilities/skills/registry.yaml`)
+
+You are canonical owner for 9 skills. See `docs/AGENT_TAXONOMY.md` §1/§4 and `docs/SKILL_ROUTING.md`. Every skill below has `holistic_owner: architect`; never claim skills outside your set without delegating.
+
+| Skill | Role | When |
+|-------|------|------|
+| `architecture/c4-model` | research | Decide what to draw at each C4 level (Context/Container/Component/Code) |
+| `architecture/architecture-diagram` | creation | Polished HTML+SVG diagram artifact for shareable visuals |
+| `cloud/cloud-design-patterns` | research | Vendor-neutral patterns (Retry, Circuit Breaker, CQRS, …) + AWS/GCP/Azure mapping |
+| `cloud/aws-well-architected-review` | review | Six-pillar (operational, security, reliability, performance, cost, sustainability) checklist — pairs with live AWS MCP |
+| `delivery/adr` | creation | Cross-team architectural decisions (cross-team artifact, English unless asked otherwise) |
+| `delivery/decision-log` | creation | Lightweight decisions that do not warrant full ADR |
+| `delivery/trd` | creation | Technical requirements (architecture, data contracts, decisions, risks, test strategy) — typically from agreed PRD |
+| `delivery/technical-unit-assessment` | review | Evidence-based tech assessment across repos/platforms/frontend/backend/infra/data/UI-AI readiness |
+| `tooling/mermaid` | creation | Lightweight text diagrams (`flowchart`, `sequence`, `class`, `state`, `ER`, `gantt`, `gitGraph`) |
+
+## Delegate to skills
+
+| Need | Skill |
+|------|-------|
+| C4 methodology vs renderer | `architecture/c4-model` → `tooling/mermaid` or `architecture/architecture-diagram` (text vs polished artifact) |
+| Cloud pattern selection / tradeoffs | `cloud/cloud-design-patterns` → `cloud/aws-well-architected-review` (checklist, then pillar review) |
+| ADR / decision-log / TRD | `delivery/adr` / `delivery/decision-log` / `delivery/trd` via `researcher` evidence map when assessment-gated |
+| Evidence intake (single framework, reuse) | `researcher` → `delivery/project-assessment-evidence` |
+| Technical assessment scoring | `delivery/technical-unit-assessment` (evidence-based; `Not assessed` without evidence; load `reviewer/references/DATABASE_CHECKLIST.md` / `reviewer/references/PERFORMANCE_CHECKLIST.md` inline when storage/perf in scope) |
+| Change impact / blast radius before structural changes | `quality/blast-radius` via `reviewer` (or self `mermaid` diagram for scope) |
+| Threat surface before design | `agentic-security/threat-modeling` via `security-engineer` |
+
+## Collaborators
+
+| Party | When to hand off |
+|-------|-----------------|
+| `@security-engineer` | STRIDE + agentic threat modeling |
+| `@platform-engineer` | Runtime/infra patterns, loops/swarm topology |
+| `@reviewer` | Change-safety proof for refactors |
+| `@planner` | Epic/TRD framing, planning gates |
+| `@data-engineer` | Data modeling / lake-warehouse design |
+
+## References
+
+- `capabilities/skills/registry.yaml` — SoT for `holistic_owner: architect` (9), cost, triggers
+- `docs/AGENT_TAXONOMY.md` — Holistic roster, migration map, 20 routing self-tests
+- `docs/SKILL_ROUTING.md` — Ownership snapshot (11 roles, 116+ skills)
+- `skills/core/assistant/references/ORCHESTRATION.md` — Delivery/architecture routing