53 Production-Ready Agents

AI Agents

Specialized AI assistants that automate specific development tasks. Each agent handles particular aspects of the software development lifecycle.

Complete Agent & Skill Package

All 53 agents and 38 skills in a single organized package for Claude Code, Gemini CLI, or CODEX.

53 Agents
38 Skills
25+ Testing Tools
Download ZIP

Agent Orchestration System Documentation

Open in new tab ↗

Conductor-Orchestrated Workflow

The conductor agent orchestrates the entire development lifecycle with quality gates at every phase. This world-class orchestration solution coordinates 53+ specialized agents for comprehensive project delivery:

# Invoke the conductor agent explicitly:
"Use the conductor agent to build a user authentication system based on auth-brd.md"

# PARALLEL BACKGROUND AGENTS (run throughout execution):
# ├── guardrails    → Input/output validation, safety checks, halt before damage
# ├── tracer        → Execution capture for debugging and performance analysis
# ├── checkpoint    → State persistence for durable execution (resume from any point)
# └── confidence    → Uncertainty detection, request clarification for low-confidence decisions

═══════════════════════════════════════════════════════════════════════════
                    COMPREHENSIVE ORCHESTRATION WORKFLOW
═══════════════════════════════════════════════════════════════════════════

PHASE 0: PROJECT INITIALIZATION (new projects only)
├── project-setup → Create harness files, git, CI/CD
├── PM → Post-setup gate
└── Verify: feature_list.json, BRD-tracker.json, CLAUDE.md

PHASE 0.5: BROWNFIELD ANALYSIS (existing codebases)
├── analyze-codebase → Directory structure, file inventory, architecture diagrams
├── planner → Detailed implementation plan with confidence scoring
├── PM → Post-analysis gate
└── Verify: CODEBASE-ANALYSIS.md, implementation plan approved

PHASE 1: REQUIREMENTS & BRD EXTRACTION
├── research → Generate comprehensive BRD (uses Gemini for adversarial review)
├── ciso → Security review (OWASP/STRIDE/threat modeling)
├── PM → Pre-extraction gate
├── CRITIC → Post-CISO validation (BLOCKING)
├── conductor → Extract ALL requirements to BRD-tracker.json
├── PM → Post-BRD gate
└── CRITIC → Post-extraction validation (BLOCKING)

PHASE 2: ARCHITECTURE & SPECIFICATION
├── architect → Create /TODO specs, page inventory, link matrix
├── api-design → OpenAPI specs, GraphQL schemas, contract testing (Pact)
├── database → Schema design, migrations, index recommendations
├── planner → Detailed plans for complex specs (confidence scoring)
├── PM → Pre-implementation gate
├── CRITIC → Post-architect validation (BLOCKING)
├── qa → Create executable tests (testing-security-stack)
└── CRITIC → Post-QA validation (BLOCKING)

PHASE 2.5: VISUAL DESIGN (UI-heavy projects)
├── frontend-designer → Design tokens, component specs, all states
├── Verify: No generic AI aesthetics, WCAG AA compliance
└── Skip if: API-only or backend project

PHASE 3: IMPLEMENTATION LOOP (iterates until gates pass)
├── auto-code → Process TODO specs (NO placeholders allowed)
├── CISO → Security code review (BLOCKING - OWASP/SANS CWE/secrets)
├── PM → Mid-implementation check
├── [code-reviewer + qa + performance + compliance] → Parallel validation
├── PM → Loop-check gate (stuck detection, scope creep)
├── CRITIC → Post-implementation validation (BLOCKING)
├── bug-find → Systematic debugging when errors persist
├── refactor → Code quality improvements when technical debt detected
├── confidence → Validate complex decisions, request clarification if needed
└── [If issues] → Write fix specs → repeat loop

PHASE 3.5: CONTENT ACCURACY VERIFICATION
├── Verify: All claims accurate, no Lorem ipsum, no placeholder content
├── Legal: Privacy Policy, Terms of Service, Disclaimers
└── All contact info valid, external links working

PHASE 4: FINAL BRD VERIFICATION (MANDATORY BLOCKING)
├── PM → Pre-verification gate
├── qa → Gap analysis (BRD vs implementation)
├── CRITIC → Pre-release validation (COMPREHENSIVE FINAL)
│   ├── BRD completeness audit (100% requirements)
│   ├── Code quality audit (no TODOs/placeholders)
│   ├── Security audit (Semgrep, Gitleaks, Trivy)
│   ├── Integration audit (live connections, not mocks)
│   └── UI/UX audit (visual regression, accessibility)
└── VERDICT: APPROVED FOR RELEASE or REQUIRES REMEDIATION

PHASE 5: DOCUMENTATION
├── PM → Pre-docs gate
├── doc-gen → Project documentation, SBOM, SDLC evidence
├── CISO → Document security review (no sensitive data, accuracy)
├── api-docs → OpenAPI specs, Swagger UI
└── PM → Complete

PHASE 5.5: WORKFLOW AUTOMATION (when n8n required)
├── n8n → Design workflow automation
├── Generate importable n8n JSON workflow files
└── Integrate with existing systems

PHASE 5.6: PENETRATION TESTING (MANDATORY for production)
├── pentest-coordinator → Scope definition, attack scenario planning
├── OWASP ZAP, Nuclei → Automated security scanning
├── Manual testing → OWASP Top 10, auth bypass, business logic
├── Finding remediation → Fix Critical/High, risk-accept others
├── CRITIC → Post-pentest validation (BLOCKING)
└── Attestation signed before deployment

PHASE 5.7: SUPPLY CHAIN SECURITY (MANDATORY)
├── supply-chain-security → SLSA provenance attestations
├── Sigstore/cosign → Artifact signing, GPG for binaries
├── Commit verification → All commits in release signed
├── SBOM-Provenance linking → Full traceability
└── SLSA Level verification → Minimum L2 for release

PHASE 6: DEPLOYMENT & OPERATIONS (production releases)
├── devops → CI/CD pipelines, Docker, Kubernetes, rollback automation
├── observability → Prometheus/Grafana dashboards, alerting, SLOs
├── CRITIC → Post-deployment validation
└── PM → Project complete

═══════════════════════════════════════════════════════════════════════════
              SPECIALIZED WORKFLOW PATTERNS
═══════════════════════════════════════════════════════════════════════════

QUICK FIX/BUG WORKFLOW (minimal overhead):
PM → analyze-codebase → bug-find → planner → auto-code → [code-reviewer + qa] → CRITIC → PM

REFACTORING WORKFLOW:
PM → analyze-codebase → planner → refactor → [code-reviewer + qa] → CRITIC → PM

AGENT ENHANCEMENT WORKFLOW (meta-improvement):
feedback-loop → root-cause → improvement-workflow → self-improve → CRITIC → PM

COMPLEX MULTI-TEAM WORKFLOW:
PM → crew(organize) → [Team A: architect + auto-code] ↔ [Team B: frontend-designer + auto-code] 
   → handoff(integrate) → [code-reviewer + qa] → CRITIC → PM

═══════════════════════════════════════════════════════════════════════════
                    SELF-EVOLUTION CYCLE
═══════════════════════════════════════════════════════════════════════════
[Execution] → feedback-loop (pattern analysis)
           → root-cause (5 Whys/Fishbone/Fault Tree)
           → improvement-workflow (track to implementation)
           → self-improve (A/B testing improvements)
           → [Improved Platform]

Result: Production-ready with 100% BRD coverage, no placeholders, full traceability

Development Workflow

C

Conductor

Orchestration

Development workflow orchestrator that coordinates all agents through requirements, architecture, implementation, testing, and documentation phases.

View Details
PM

PM (Project Manager)

Workflow Control

Workflow discipline enforcer that maintains sequence integrity and prevents deviations. Runs at every gate to verify sequencing and detect scope creep.

View Details
CR

Critic

Quality Gate

Skeptical validator that scrutinizes every deliverable, trusts nothing, and verifies completeness against specifications before allowing progression.

View Details
DR

Dynamic Router

Task Routing

Intelligent task routing system that analyzes requests, determines optimal agent assignments, and coordinates multi-agent workflows dynamically.

View Details
AR

Architect

Design

Transforms high-level ideas into detailed, implementation-ready feature specifications with acceptance criteria and testing requirements.

View Details
AC

Auto-Code

Implementation

Automatically implements features from TODO specifications. Generates production-ready code, runs tests, and moves completed specs to COMPLETE.

View Details
RS

Research

Analysis

Elite research analyst that gathers information, verifies facts, and synthesizes complex data. Uses Gemini for adversarial BRD review.

View Details
PS

Project Setup

Initialization

Initializes development environments with directory structure, git configuration, and all harness artifacts needed for conductor workflows.

View Details
PRD

PRD Manager

Documentation

Living PRD repository manager that maintains semantic indexing, version tracking, and continuous context injection for project requirements.

View Details
API

API Design

API Architecture

API-first development architect specializing in OpenAPI 3.0, RESTful patterns, GraphQL, gRPC, and API versioning strategies with contract-first design.

View Details

Advanced Orchestration

PL

Planner

Planning

Interactive planning agent inspired by Devin 2.0. Collaborates with users to create detailed plans before execution, ensuring alignment.

View Details
CP

Checkpoint

State Management

Persistent state management inspired by LangGraph. Creates checkpoints at key decision points, enabling state restoration and replay.

View Details
HO

Handoff

Agent Transitions

Structured agent transitions inspired by OpenAI SDK. Defines explicit handoff protocols between agents with context preservation.

View Details
GR

Guardrails

Validation

Parallel validation system inspired by OpenAI SDK. Runs input/output guardrails concurrently with tripwire behavior for fast failures.

View Details
CW

Crew

Team Organization

Role-based team organization inspired by CrewAI. Structures agents into hierarchical crews with managers, specialists, and validators.

View Details
TR

Tracer

Observability

Full observability system inspired by OpenAI SDK. Captures execution traces with spans for LLM calls, tools, handoffs, and guardrails.

View Details
TT

Time-Travel

Debugging

Execution replay agent inspired by LangGraph. Jumps to checkpoints, modifies state, and explores alternative execution paths.

View Details
CF

Confidence

Uncertainty Detection

Uncertainty detection inspired by Devin/Confucius. Monitors confidence levels and triggers clarification when thresholds drop.

View Details
SI

Self-Improve

Optimization

Self-improvement loop inspired by SICA. Benchmarks performance, identifies weaknesses, generates improvements, and A/B tests changes.

View Details
CH

Context Hygiene

Context Management

Mid-workflow context management implementing the 60% Rule. Generates handoff documents, tracks context budget, and prevents context rot.

View Details
PM

Procedural Memory

Knowledge

Captures successful multi-step task completions, extracts reusable patterns, and provides few-shot examples for similar future tasks.

View Details

Code Quality

Testing & Documentation

Security & Analysis

CI

CISO

Security

Security-first development agent ensuring OWASP Top 10 compliance, secure coding practices, threat modeling, and vulnerability prevention.

View Details
AN

Analyze Codebase

Analysis

Comprehensive codebase analysis including project overview, architecture mapping, file structure, and improvement recommendations.

View Details
N8

n8n Workflow Builder

Automation

Expert n8n workflow architect that transforms automation ideas into production-ready, importable n8n JSON workflow files.

View Details
CMP

Compliance

Governance

Regulatory compliance expert for SOC 2, GDPR, HIPAA, PCI-DSS, ISO 27001 with policy-as-code implementation and audit evidence automation.

View Details
OBS

Observability

Operations

Elite Site Reliability Engineer for production monitoring, logging, alerting, distributed tracing, SLO/SLI definition, and incident response.

View Details
PT

Pentest Coordinator

Security

Coordinates penetration testing activities including scope definition, attack scenario planning, finding tracking, and remediation verification.

View Details
SL

Secrets Lifecycle

Security

Manages complete secrets lifecycle including vault integration, rotation policies, dynamic secrets, and emergency rotation procedures.

View Details
SG

Security Gate

Security

Mandatory security checkpoint enforcing OPA policies, mTLS identity verification, and immutable audit logging for all agent operations.

View Details
SC

Supply Chain Security

Security

Generates SLSA provenance attestations, signs artifacts with Sigstore/cosign, and ensures end-to-end software artifact traceability.

View Details

Platform & Extensibility

AB

Agent Builder

Meta-Agent

Meta-agent for creating new domain-specific agents. Guides through role definition, capabilities, behavioral rules, and generates production-ready agent files.

View Details
SK

Skill SDK

Development

Comprehensive skill development framework for creating, extending, testing, and publishing skills on the AdvanceCyber.ai platform.

View Details
MCP

MCP Manager

Integration

Central authority for MCP server integrations. Handles configuration, security validation, troubleshooting, and optimization of external connections.

View Details
CB

Command Builder

Extensibility

Framework for creating and managing custom slash commands. Build command libraries, compose workflows, and extend the command vocabulary.

View Details
CM

Context Manager

Optimization

Context window optimization system. Monitors utilization, implements modular rules, performs intelligent resets, and coordinates context transfer.

View Details
DEV

DevOps

Infrastructure

CI/CD pipeline architect with GitHub Actions, Kubernetes, Docker, Terraform expertise and deployment strategies (blue-green, canary, rolling).

View Details
GF

Git-Flow

DevOps

Implements the git-flow branching model with feature, release, and hotfix branches plus proper merging workflows between main and develop.

View Details
MEM

Memory System

Infrastructure

Expert memory system engineer for Claude Code's persistent memory infrastructure including Qdrant vector database, n8n workflows, and MCP tools.

View Details
OFF

Offline Dev

Development

Offline AI-assisted development expert using Goose Local and FICLI with local LLM inference via Ollama for productive coding without internet.

View Details
CTX

Context Translator

Utility

Context translation specialist for bidirectional conversion between Claude Code (CLAUDE.md) and Goose (.goosehints) formats.

View Details
GIT

Git-Flow

Version Control

Implements Vincent Driessen's git-flow branching model. Manages feature, release, and hotfix branches with proper merging strategies.

View Details
IMG

Infographic Generator

Media

Creates high-quality infographics from text content using Google Gemini image generation with Two-Step Parsing and SLCT formula.

View Details
PEN

Pentest Coordinator

Security

Coordinates penetration testing including scope definition, attack scenario planning, finding tracking, remediation verification, and attestation.

View Details
MEM

Procedural Memory

Memory

Captures successful task execution patterns, extracts reusable procedures, and provides few-shot examples for similar future tasks.

View Details
GAP

SDLC Gap Analysis

Security

Analyzes secure SDLC coverage against frameworks: NIST SSDF, OWASP SAMM, Microsoft SDL, SLSA, CISA, ISO 27034, BSIMM.

View Details
SEC

Secrets Lifecycle

Security

Manages complete secrets lifecycle: vault integration, rotation policies, dynamic secrets, inventory, and emergency rotation.

View Details
GTW

Security Gate

Security

Mandatory security checkpoint for agent operations. Enforces OPA policies, verifies identity via mTLS, logs to immutable audit.

View Details
SEO

SEO

Content

SEO pipeline automation: keyword research, content strategy, technical audits, on-page optimization, and search performance analysis.

View Details
SCS

Supply Chain Security

Security

SLSA provenance, Sigstore artifact signing, commit verification, SBOM linking. Essential for supply chain security compliance.

View Details

The AI Orchestra

Watch how AI agents orchestrate your development workflow

The AI Orchestra - Orchestrated Development Workflows

System Architecture

A comprehensive view of the Agentic Development System

Agentic Development System Architecture

Click to view the full Agentic Development System PDF

Looking for Skills?

Skills extend AI agents with specialized knowledge, workflows, and tool integrations.

  • Agents: Autonomous workers that perform tasks
  • Skills: Knowledge bases that enhance agent capabilities
  • 38 Skills Included: api-catalog, artifacts-builder, brand-guidelines, canvas-design, changelog-generator, competitive-ads-extractor, content-research-writer, developer-growth-analysis, docker-health, document-skills, domain-name-brainstormer, file-organizer, image-enhancer, infographic-generator, internal-comms, invoice-organizer, lead-research-assistant, marketplace, mcp-builder, meeting-insights-analyzer, n8n-code-javascript, n8n-code-python, n8n-expression-syntax, n8n-mcp-tools-expert, n8n-node-configuration, n8n-validation-expert, n8n-workflow-patterns, notebooklm, raffle-winner-picker, skill-creator, skill-share, slack-gif-creator, testing-security-stack, theme-factory, ui-design, video-downloader, webapp-testing, yt-transcript
View All Skills