Use this agent during PR review to hunt injection-class vulnerabilities in a PR's changes - command injection, zip-slip and path traversal, prototype pollution, SSRF, credential leakage, and unsafe deserialization. It reports a finding only when untrusted data actually crosses a trust boundary into a dangerous sink; code that merely handles trusted workspace config is endorsed as sound so the reviewer knows security was checked. Read-only on the sandbox checkout.

Use this agent during PR review to check that a PR's comments and doc-comments are TRUE. It verifies every load-bearing claim in a changed comment against the code it describes, and flags comments the diff left stale. It does not ask for more comments - this repo's committed CLAUDE.md rules default to no comment, so requests to add or expand one are Suggestions at most. It also enforces the repo's load-bearing markers (@deprecated removal versions, TODO(vNN) forms). Comments that verify are endorsed so the reviewer knows accuracy was checked. Read-only on the sandbox checkout.

Use this agent during PR review to answer two docs questions about any PR. Coverage, on every diff - does the change alter user-facing behavior that astro-docs documents in prose, without updating those docs? Compliance, when the diff touches docs content (astro-docs/src/content/** or astro-docs/sidebar.mts) - do the changed pages follow the committed docs rules (astro-docs/STYLE_GUIDE.md, the docs instructions in CLAUDE.md) and the structural requirements those rules imply (missing redirects for moved/renamed/deleted pages, sidebar-label-coupled routes, Markdoc syntax that breaks parsing)? It reports a finding only when a committed rule is violated, a page would break for readers, or prose docs are left stale; taste-level wording asks go to Suggestions. Read-only on the sandbox checkout.

Review an Nx PR's tests, ticket grounding, source comments, and user documentation. Use during review-pr.

Use this agent during PR review to analyze the runtime performance of a PR's changes along two axes - (1) resource footprint (unnecessary CPU or memory usage) and (2) execution efficiency (does the code run quickly, avoid redundant work, and scale with workspace size). It reports a finding only when the cost is real on a hot path or scales with input size; micro-costs in cold paths are endorsed as sound so the reviewer knows performance was checked. Read-only on the sandbox checkout.

Use this agent during PR review to independently design alternative solutions to the problem a PR solves and contrast them with the PR's chosen approach. It reports a finding only when an alternative is materially better (root-cause vs symptom fix, reuse of an existing utility, large complexity reduction) or when the chosen approach cannot fully solve the problem; otherwise it endorses the approach so the reviewer knows alternatives were considered and rejected. Read-only on the checkout under review.

Grounds a PR review in the reported bug. Fetches each issue linked from the PR body (Fixes/Closes/Resolves

Review an Nx PR's implementation once for correctness, error/fallback behavior, and changed type or public API contracts. Use during review-pr.

Review an Nx PR for real trust-boundary vulnerabilities. Use during review-pr.