Code Reviewer
Reviews pull requests for bugs, performance issues, and style inconsistencies.
Test Engineer
Generates comprehensive test suites with edge cases and mocks.
DevOps Engineer
Writes CI/CD pipelines, Dockerfiles, and infrastructure configurations.
Security Auditor
Scans code for OWASP Top 10 vulnerabilities and security anti-patterns.
Secret Scanner
Detects hardcoded secrets, API keys, tokens, and credentials leaked in source code.
Incident Response Agent
Guides teams through security incident response, triage, containment, and post-mortem procedures.
Compliance Checker
Reviews code and infrastructure for GDPR, SOC 2, and HIPAA compliance patterns.
Container Security Scanner
Audits Dockerfiles, container images, and Kubernetes manifests for security misconfigurations and hardening gaps.
API Security Tester
Tests APIs against the OWASP API Security Top 10, checking authentication, authorization, rate limiting, and data exposure.
Supply Chain Security
Secures the software supply chain: SBOM generation, dependency provenance, artifact signing, and build integrity.
Cloud Security Auditor
Audits AWS, Azure, and GCP configurations for security misconfigurations, overly permissive IAM policies, and public exposure.
Frontend Architect
Builds accessible, performant component architectures in React, Vue, or Svelte with design-system discipline.
Backend Architect
Designs scalable service architectures, data models, and API contracts with production-grade error handling.
Performance Optimizer
Diagnoses and fixes performance bottlenecks in web apps — Core Web Vitals, bundle size, runtime efficiency.
Migration Specialist
Plans and executes framework upgrades, language migrations, and deprecation removals with zero-downtime strategies.
Kubernetes Operator
Writes production-grade K8s manifests, Helm charts, and cluster management configurations.
Observability Engineer
Designs monitoring dashboards, alerting rules, SLOs, and distributed tracing instrumentation.
ADR Writer
Creates Architecture Decision Records that capture context, options, and consequences of technical decisions.
Onboarding Guide Writer
Creates developer onboarding documentation that gets new team members productive in days, not weeks.
Threat Modeler
Conducts STRIDE-based threat modeling, creates attack trees, and produces actionable risk assessments.
Data Pipeline Engineer
Designs ETL/ELT pipelines, streaming architectures, and data quality frameworks.
Accessibility Auditor
Audits web interfaces for WCAG 2.2 compliance, keyboard navigation, and screen reader compatibility.
Design System Maintainer
Maintains component libraries, design tokens, and pattern documentation for consistent UIs.
Prompt Engineer
Optimizes system prompts, crafts few-shot examples, and designs evaluation frameworks for LLM applications.
ML Pipeline Builder
Designs end-to-end ML pipelines: data preparation, training, evaluation, and deployment with experiment tracking.
Email Drafter
Composes context-aware professional emails — follow-ups, cold outreach, status updates, and escalations.
Meeting Notes Agent
Transforms meeting transcripts and raw notes into structured summaries with decisions, action items, and owners.
Ticket Writer
Creates well-structured Jira, Linear, or GitHub issues from vague descriptions with acceptance criteria and sizing.
Slack Message Composer
Crafts clear team messages — announcements, updates, requests, and incident comms for Slack and Teams.
Content Repurposer
Converts content between formats — blog posts to social threads, docs to tutorials, notes to presentations.
Supabase Developer
Teaches AI to build with Supabase — database schemas, Row Level Security, Auth, Edge Functions, and Realtime.
Stripe Integration
Teaches AI to implement Stripe payments — checkout sessions, webhooks, subscriptions, and billing portal.
Vercel Platform
Teaches AI to deploy and configure on Vercel — serverless functions, edge middleware, environment variables, and caching.
Clerk Auth
Teaches AI to implement authentication with Clerk — sign-in/up flows, middleware protection, organizations, and webhooks.
Resend Email
Teaches AI to send transactional emails with Resend — React Email templates, domains, and delivery tracking.
Prisma ORM
Teaches AI to model data with Prisma — schemas, migrations, typed queries, relations, and performance patterns.
Neon Serverless Postgres
Teaches AI to use Neon — serverless Postgres with branching, autoscaling, connection pooling, and the serverless driver.
Upstash Redis & Messaging
Teaches AI to use Upstash — serverless Redis for caching, rate limiting, and QStash for message queues and scheduled jobs.
Refactoring Agent
Restructures code for clarity, performance, and maintainability without changing behavior.
API Designer
Designs RESTful and GraphQL APIs with schemas, endpoints, and error handling.
Documentation Writer
Creates clear technical documentation, READMEs, and API references.
Changelog Writer
Generates structured changelogs from commits, PRs, and release notes.
Dependency Checker
Audits project dependencies for known vulnerabilities, outdated packages, and license compliance.
Security Headers Auditor
Reviews and configures HTTP security headers: CSP, CORS, HSTS, and browser protections.
Cryptography Advisor
Guides correct implementation of encryption, hashing, key management, and cryptographic protocols.
SQL Expert
Writes optimized SQL queries, designs schemas, and debugs performance issues.
Data Analyst
Analyzes datasets, generates insights, and creates visualizations.
PRD Writer
Turns product ideas into structured Product Requirements Documents with user stories, success metrics, and scope.
Research Synthesizer
Synthesizes information from multiple sources into structured briefs with key findings, comparisons, and recommendations.
Sprint Retro Facilitator
Facilitates structured sprint retrospectives — what went well, what didn't, action items for improvement.
Git Workflow Agent
Manages branching strategies, commit conventions, and merge workflows.
Secure Code Reviewer
Reviews code with a security-first lens, enforcing secure defaults and defensive coding patterns.
Next.js Project
CLAUDE.md for a Next.js application with App Router, Tailwind CSS, and TypeScript conventions.
Python API Project
CLAUDE.md for a Python backend with FastAPI, SQLAlchemy, and pytest conventions.
Fullstack Monorepo
CLAUDE.md for a Turborepo monorepo with a Next.js frontend and shared packages.
Go Microservice
CLAUDE.md for a Go microservice with standard project layout, gRPC, and structured logging.
Rust CLI Tool
CLAUDE.md for a Rust command-line application with clap, structured errors, and release builds.
Next.js TypeScript
Cursor rules for Next.js projects with App Router, TypeScript strict mode, and Tailwind CSS.
Python FastAPI
Cursor rules for Python backends with FastAPI, Pydantic validation, and async patterns.
React Component Library
Cursor rules for building accessible, composable React component libraries with Storybook.
Go Backend Service
Cursor rules for Go microservices with clean architecture, structured logging, and gRPC/REST APIs.
Security-Hardened Rules
Cursor rules enforcing secure coding practices — input validation, auth, encryption, and OWASP compliance.
Next.js Full Stack
Windsurf rules for a Next.js App Router project with TypeScript, Tailwind CSS, and Prisma.
Python FastAPI
Windsurf rules for a Python backend built with FastAPI, SQLAlchemy, and Pydantic.
React SPA
Windsurf rules for a React single-page application with TypeScript, Vite, and React Router.
Go Microservice
Windsurf rules for a Go microservice with standard library HTTP, structured logging, and PostgreSQL.
PostgreSQL MCP
Connect your AI client to a PostgreSQL database via MCP.
GitHub MCP
Connect your AI client to the GitHub API for repos, issues, and PRs.
Filesystem MCP
Give your AI client read/write access to local directories.
Brave Search MCP
Give your AI client web search capabilities via Brave Search API.
Coding Agent Orchestrator
Orchestrate background coding agents (Codex, Claude Code, OpenCode) with process management and parallel workflows.
Skill Creator
Guide for creating well-structured OpenClaw skills with proper frontmatter, instructions, and ClawHub publishing.
Channel Automation
Build skills for automating workflows across OpenClaw messaging channels — WhatsApp, Telegram, Slack, Discord, and more.
Git & PR Workflow
Automated Git operations, parallel PR reviews, issue fixing with worktrees, and GitHub integration via the gh CLI.
Browser Automation
Web browsing, scraping, and automation using OpenClaw's built-in browser control with CDP.