agents.json

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "description": "SpecFlow custom agent registry",
  "agents": {
    "criteria-reviewer": {
      "source": "custom",
      "invoke": ".specflow/agents/criteria-reviewer.md",
      "description": "BOSS criteria validation (Binary, Observable, Specific, Scope-bound)"
    },
    "_example_npx": {
      "source": "custom",
      "invoke": "@example/scanner",
      "description": "Example npx-based agent (disabled - remove underscore to enable)"
    },
    "_example_local": {
      "source": "custom",
      "invoke": ".specflow/agents/example-agent.md",
      "description": "Example local prompt agent (disabled - remove underscore to enable)"
    },
    "_test_skill": {
      "source": "skill",
      "invoke": ".specflow/skills/test",
      "description": "Test skill for verification (disabled)"
    },
    "code-review-excellence": {
      "source": "skill",
      "invoke": "/Users/deanb/dev/ai/specflow/.specflow/skills/code-review-excellence",
      "description": "Master effective code review practices to provide constructive feedback, catch bugs early, and foster knowledge sharing while maintaining team morale. Use when reviewing pull requests, establishing review standards, or mentoring developers."
    },
    "e2e-testing-patterns": {
      "source": "skill",
      "invoke": "/Users/deanb/dev/ai/specflow/.specflow/skills/e2e-testing-patterns",
      "description": "Master end-to-end testing with Playwright and Cypress to build reliable test suites that catch bugs, improve confidence, and enable fast deployment. Use when implementing E2E tests, debugging flaky tests, or establishing testing standards."
    },
    "sql-optimization-patterns": {
      "source": "skill",
      "invoke": "/Users/deanb/dev/ai/specflow/.specflow/skills/sql-optimization-patterns",
      "description": "Master SQL query optimization, indexing strategies, and EXPLAIN analysis to dramatically improve database performance and eliminate slow queries. Use when debugging slow queries, designing database schemas, or optimizing application performance."
    },
    "typescript-review": {
      "source": "skill",
      "invoke": "/Users/deanb/dev/ai/specflow/.specflow/skills/typescript-review",
      "description": "Review TypeScript and JavaScript code changes for compliance with Metabase coding standards, style violations, and code quality issues. Use when reviewing pull requests or diffs containing TypeScript/JavaScript code."
    },
    "hierarchical-coordinator": {
      "source": "skill",
      "invoke": "/Users/deanb/dev/ai/specflow/.specflow/skills/hierarchical-coordinator",
      "description": "Prevent goal drift in long-running multi-agent workflows using a coordinator agent that validates outputs against original objectives at checkpoints. Use when orchestrating 3+ agents, multi-phase features, complex implementations, or any workflow where agents may lose sight of original requirements. Trigger keywords - \"hierarchical\", \"coordinator\", \"anti-drift\", \"checkpoint\", \"validation\", \"goal-alignment\", \"decomposition\", \"phase-gate\", \"shared-state\", \"drift detection\"."
    },
    "integration-review": {
      "source": "skill",
      "invoke": ".specflow/skills/integration-review",
      "description": "Detect breaking changes, circular imports, and integration issues in modified code. Use when reviewing PRs that modify exported functions, types, or module boundaries."
    },
    "test-execution": {
      "source": "skill",
      "invoke": ".specflow/skills/test-execution",
      "description": "Run tests and enforce coverage gates. Detects framework, runs affected tests with staged parallel execution, and checks scope-based coverage thresholds.",
      "review-capable": true,
      "scope-minimum": "trivial"
    },
    "uat-execution": {
      "source": "skill",
      "invoke": ".specflow/skills/uat-execution",
      "description": "Execute Gherkin scenarios using browser-use (UI) or Node.js fetch (API) for automated User Acceptance Testing.",
      "review-capable": true,
      "scope-minimum": "small"
    },
    "slop-detector": {
      "source": "skill",
      "invoke": ".specflow/skills/slop-detector",
      "bundled": true,
      "tools": ["ast-grep", "jscpd", "knip", "vulture", "ruff"],
      "toolInstall": {
        "ast-grep": "npm i -g @ast-grep/cli",
        "jscpd": "npm i -g jscpd",
        "knip": "npm i -g knip",
        "vulture": "pip install vulture",
        "ruff": "pip install ruff"
      },
      "description": "Detect AI-generated code quality issues (duplicates, dead code, placeholders, empty catches)",
      "review-capable": true,
      "scope-minimum": "trivial"
    },
    "executive-reporting": {
      "source": "skill",
      "invoke": ".specflow/skills/executive-reporting",
      "bundled": true,
      "description": "Generate executive status reports, dashboards, and board packages from SpecFlow feature artifacts",
      "report-capable": true,
      "scope-minimum": "small"
    },
    "project-health-check": {
      "source": "skill",
      "invoke": ".specflow/skills/project-health-check",
      "bundled": true,
      "description": "6-dimension project health assessment with weighted scoring and flag analysis",
      "report-capable": true,
      "scope-minimum": "small"
    },
    "risk-management": {
      "source": "skill",
      "invoke": ".specflow/skills/risk-management",
      "bundled": true,
      "description": "RAID log management and risk correlation analysis with STRIDE integration",
      "report-capable": true,
      "scope-minimum": "small"
    },
    "app-security": {
      "source": "skill",
      "invoke": ".specflow/skills/app-security",
      "bundled": true,
      "description": "OWASP-based code-level vulnerability detection for auth, input, API, secrets, payment, and crypto patterns",
      "review-capable": true,
      "security-capable": true,
      "scope-minimum": "small"
    },
    "database-security": {
      "source": "skill",
      "invoke": ".specflow/skills/database-security",
      "bundled": true,
      "description": "Database-specific security review for SQL injection, ORM safety, credentials, and configuration",
      "review-capable": true,
      "security-capable": true,
      "scope-minimum": "small"
    },
    "pptx": {
      "source": "skill",
      "invoke": ".specflow/skills/pptx",
      "install": "pptx@anthropics/skills",
      "tools": ["markitdown", "pptxgenjs", "soffice", "pdftoppm", "pillow"],
      "toolInstall": {
        "markitdown": "pip install \"markitdown[pptx]\"",
        "pptxgenjs": "npm install -g pptxgenjs",
        "soffice": "brew install libreoffice (macOS) or apt install libreoffice (Linux)",
        "pdftoppm": "brew install poppler (macOS) or apt install poppler-utils (Linux)",
        "pillow": "pip install Pillow"
      },
      "hasScripts": true,
      "description": "Generate PowerPoint presentations from scratch or edit templates",
      "report-capable": true
    }
  },
  "_docs": {
    "adding_agents": [
      "1. Add entry to 'agents' object above",
      "2. For npx: use package name as 'invoke' value",
      "3. For local: use path to .md file as 'invoke' value",
      "4. All custom agents use source: 'custom'",
      "5. Agents prefixed with _ are examples/disabled",
      "6. For skills: installed via 'sf skill install', use source: 'skill'"
    ],
    "skill_fields": [
      "bundled: boolean - If true, skill ships with SpecFlow (init copies it)",
      "install: string - External source for downloadable skills (name@owner/repo)",
      "tools: string[] - CLI tools required by this skill",
      "toolInstall: object - Install commands for each tool {tool: 'command'}",
      "review-capable: boolean - If true, skill can be used by sf-review",
      "report-capable: boolean - If true, skill can generate executive reports (used by PM for report triggers)",
      "security-capable: boolean - If true, skill provides security-focused analysis (used by PM for security review)",
      "scope-minimum: string - Minimum scope level to trigger (trivial|small|medium|large|complex)"
    ],
    "invoking": [
      "Via CLI: sf agent <name>",
      "Via PM: PM may route to custom agents based on description",
      "Via slash: Create .claude/commands/sf-<name>.md for direct access",
      "Via skill: sf skill install name@owner/repo (auto-registers)"
    ]
  }
}