AI agents for code review, testing and security

The ADR Writer agent turns a threat model into an Architecture Decision Record with context, decision, consequences and alternatives, saved as a proposed ADR.

The Architect agent plans changes, scopes risk, merges review findings and makes go/no-go calls. It runs in ten of the sixteen built-in workflows.

The Backend Engineer agent implements the server side of a feature from an approved design, listing touched files and API impact. It runs in Feature SDLC.

The Builder agent describes the exact code changes a task needs, file by file. It runs in six built-in workflows before the code pass writes the real diff.

The Database Engineer agent designs schema changes with their index, locking and backfill implications. It opens the Data Migration workflow with the schema.

The Dependency Auditor agent flags vulnerable, badly licensed and unmaintained packages with upgrade paths. It runs in Dependency Refresh and Release Readiness.

The DevOps Engineer agent plans infrastructure and pipeline changes with rollout, rollback and validation steps. It plans and applies in DevOps Change.

The E2E Tester agent defines end-to-end scenarios for the user-visible flow and reports coverage gaps. It runs in Feature SDLC and Release Readiness.

The Frontend Engineer agent implements the client side of a feature from the design, covering components, state and accessibility. It runs in Feature SDLC.

The Incident Responder agent sets the timeline, scope and impact of an incident and lists the immediate triage actions. It opens the Incident Response workflow.

The Migration Specialist agent writes migrations, codemods and upgrade steps with rollback notes. It runs in Dependency Refresh and Data Migration.

The Performance Tester agent finds likely hot paths, quantifies bottlenecks and plans how to check an optimization. It opens and closes Performance Tuning.

The Product Analyst agent turns a goal into requirements with clear acceptance criteria and scope limits. It runs in Feature SDLC and Discovery & Spec.

The Project Planner agent writes a phased delivery plan with dependencies, milestones and effort estimates, and syncs it to the workspace plan board as items.

The Researcher agent surveys your existing code, libraries and references before work starts, and sums up prior art and constraints. It opens Discovery & Spec.

The Reviewer agent checks proposed changes for correctness, edge cases and maintainability, and lists concrete fixes. It runs in eight built-in workflows.

The Security Auditor agent checks changes for authz flaws, injection, leaked secrets, data exposure and supply-chain risk. It runs in nine built-in workflows.

The Site Reliability agent drafts blameless postmortems, SLOs, alerts and runbook entries. It closes Incident Response, so its postmortem is the summary.

The Technical Writer agent writes or updates the user-facing documentation for a change. It closes Feature SDLC, so its draft also becomes the session summary.

The Tester agent writes the test plan and names the test cases that prove a change works. It runs in ten built-in workflows, and your own tests run after.

The UI Designer agent plans front-end work: layout, components, states and accessibility, fitted to your existing design. It opens UI Implementation.