| reviewer | read, search | Reviews a diff or PR: bugs, security, missing tests; path:line - severity - fix findings. Never edits. |
| planner | read, search | Turns a request into numbered steps with files, tests, migrations and open questions. Never writes code. |
| test-writer | read, search, edit, execute | Writes tests in your framework's style, runs them, checks they fail when the code is wrong. |
| security-reviewer | read, search | Injection, access control, secrets, SSRF, uploads, unsafe parsing, prompt injection in AI features. |
| debugger | read, search, edit, execute | Reproduce, failing test, root cause in one sentence, minimal fix. |
| refactorer | read, search, edit, execute | Small behaviour-preserving steps with tests green after each. |
| docs-writer | read, search, edit | README, API docs, docstrings, changelogs that match the code. |
| upgrade-helper | read, search, edit, execute, web | Reads the upgrade guide for every version crossed, applies changes, fixes breakages. |
| accessibility-auditor | read, search | WCAG 2.2 audit: semantics, labels, keyboard, focus, contrast, target size. |
| performance-reviewer | read, search, execute | N+1 queries, missing indexes, bundle bloat, leaks, with evidence. Never edits. |
| pr-describer | read, search, execute | PR title and description from git log / git diff (read-only git). |
| codebase-guide | read, search | Explains how a feature works with file references, for onboarding. |