mirror of
https://github.com/alirezarezvani/claude-skills.git
synced 2026-08-28 04:24:58 +00:00
3806b9b723
Per https://code.claude.com/docs/en/sub-agents, agents require YAML frontmatter with name + description, and the field is `tools:` not `allowed-tools:` (deprecated). Bare `Bash` allows any command including curl/wget/rm, which violates defense-in-depth. Changes: - engineering/agenthub/agents/hub-coordinator.md: add full frontmatter (name, description, tools allowlist for git/python/node/Agent, disallowedTools for rm -rf / curl / wget / git push --force, model) - engineering-team/self-improving-agent/agents/memory-analyst.md: add frontmatter, read-only tools (Read, Glob, Grep) - engineering-team/self-improving-agent/agents/skill-extractor.md: add frontmatter, write tools (Read, Write, Edit, Glob, Grep) - engineering-team/playwright-pro/agents/test-architect.md: rename allowed-tools to tools, add model: inherit - engineering-team/playwright-pro/agents/migration-planner.md: same rename - engineering-team/playwright-pro/agents/test-debugger.md: rename + narrow bare Bash to npx playwright / node / npm patterns, add disallowedTools for rm / curl / wget / destructive git - engineering/karpathy-coder/agents/karpathy-reviewer.md: narrow bare Bash to git read-ops + python, add disallowedTools All registered agents now load cleanly under the sub-agents spec rather than falling through to permissive registration. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| migration-planner.md | ||
| test-architect.md | ||
| test-debugger.md | ||