What's on the bench.
2b Rust Source Analyzer
Performs source-level zeroization analysis for Rust crates in zeroize-audit. Generates rustdoc JSON for trait-aware analysis and runs token-based dangerous API scanning. Produces sensitive objects and source findings consumed by rust-compiler-analyzer and report assembly.
2 Source Analyzer
Identifies sensitive objects, detects wipe calls, validates correctness, and performs data-flow/heap analysis for zeroize-audit. Produces the sensitive object list and source-level findings consumed by compiler analysis and report assembly.
1 MCP Resolver
Resolves symbol definitions, types, and cross-file references using Serena MCP for zeroize-audit. Runs before source analysis so enriched type data is available for wipe validation.
0 Preflight
Performs preflight validation, config merging, TU enumeration, and work directory setup for zeroize-audit. Produces merged-config.yaml, preflight.json, and orchestrator-state.json.
Workflow Skill Reviewer
Reviews workflow-based Claude Code skills for structural quality, pattern adherence, tool assignment correctness, and anti-pattern detection. Use when auditing an existing skill or validating a newly created skill before submission.
Semgrep Scanner
Executes Semgrep CLI scans for a specific language category and produces SARIF output. Spawned by the semgrep skill as a parallel worker — one agent per detected language.
Spec Compliance Checker
Performs full specification-to-code compliance analysis for blockchain audits. Use when verifying that smart contract implementations correctly match their formal specifications or whitepapers.
Sharp Edges Analyzer
Evaluates APIs, configurations, and library interfaces for misuse resistance and footgun potential. Use when reviewing code for error-prone designs, dangerous defaults, or APIs that make security mistakes easy.
Poc Builder
Creates proof-of-concept exploits (pseudocode, executable, and unit tests) demonstrating a verified vulnerability, plus negative PoCs showing exploit preconditions. Spawned by fp-check during Phase 4 verification.
Exploitability Verifier
Verifies whether a suspected vulnerability is actually exploitable by proving attacker control, mathematical bounds, and race condition feasibility. Spawned by fp-check during Phase 2 verification.
Data Flow Analyzer
Analyzes data flow from source to vulnerability sink, mapping trust boundaries, API contracts, environment protections, and cross-references. Spawned by fp-check during Phase 1 verification.
Dimension Discoverer
Discovers dimensional vocabulary for codebases by analyzing naming conventions and protocol patterns
Adversarial Modeler
Models attacker perspectives and builds exploit scenarios for HIGH RISK code changes. Use when differential review identifies high-risk changes that need adversarial threat modeling and concrete attack vector analysis.
C Review Worker
Runs one assigned c-review cluster task and writes finding files to the run's output directory. Spawned by the c-review skill orchestrator only.
C Review Fp Judge
Second-stage judge in the c-review pipeline. Runs after dedup-judge on merged primaries only. Decides fp_verdict, then (for survivors) severity/attack_vector/exploitability, and writes the final REPORT.md + REPORT.sarif. Spawned by the c-review skill orchestrator only.
C Review Dedup Judge
Deduplication judge for the c-review pipeline. Merges duplicate findings deterministically by exact location, then narrowly reviews same-function same-class candidates. Spawned by the c-review skill orchestrator only.
wxPython Specialist
wxPython GUI expert -- sizer layouts, event handling, AUI framework, custom controls, threading (wx.CallAfter/wx.PostEvent), dialog design, menu/toolbar construction, and desktop accessibility (screen readers, keyboard navigation). Covers cross-platform gotchas for Windows and macOS.
Word Accessibility
Word document accessibility specialist. Use when scanning, reviewing, or remediating .docx files for accessibility. Covers document title, heading structure, alt text, table headers, hyperlink text, merged cells, language settings, and reading order. Enforces Microsoft Accessibility Checker rules mapped to WCAG 2.1 AA.
Wiki Manager
GitHub Wiki command center -- create, edit, organize, and search wiki pages entirely from the editor. Bypasses the drag-to-reorder, inconsistent navigation, and poorly-announced editor mode switches that make the wiki UI difficult for screen reader users.
Web Issue Fixer
Internal helper for applying accessibility fixes to web source code. Handles auto-fixable issues (missing alt, lang, labels, tabindex) and presents human-judgment fixes for approval. Generates framework-specific code using the detected stack.
Web CSV Reporter
Internal helper for exporting web accessibility audit findings to CSV format. Generates structured CSV reports with severity scoring, WCAG criteria mapping, Accessibility Insights help links, and actionable remediation guidance for each finding.
Web Component Specialist
Audits web components (custom elements, Shadow DOM) for accessibility. Covers ElementInternals API, cross-shadow ARIA delegation, slot-based composition, form-associated custom elements, and shadow DOM focus management.
Web Accessibility Wizard 2
Interactive web accessibility review wizard. Runs a guided, step-by-step WCAG audit of your web application. Walks you through every accessibility domain using specialist subagents, asks questions to understand your project, and produces a prioritized action plan. Includes severity scoring, framework-specific intelligence, remediation tracking, and interactive fix mode. For document accessibility (Word, Excel, PowerPoint, PDF), use the document-accessibility-wizard instead.
WCAG 3.0 Preview
Educational agent for WCAG 3.0 (W3C Accessibility Guidelines). Explains methodology changes, outcome-based conformance, the APCA contrast algorithm, functional needs categories, and new cognitive/task-based criteria. Helps teams plan for the transition from WCAG 2.2 to 3.0. WCAG 3.0 is in early draft — this agent clearly communicates its draft status.