AGENT.md Catalog
Specialised AI agents for networking, security and IT operations. Install the definition on your own host, run it with your own AI account — no PermitANY account, no API key here.
ACL Auditor
Agent · Security Review
Computes what every ACL line really matches — IPv4 and IPv6 — and accounts for the TCAM it compiles into and the CPU its logging costs.
Cisco IOS/IOS-XE · Cisco IOS XR · Cisco NX-OS
AI Agent Designer
Agent · AI & Automation
Designs agentic systems for infrastructure — and will tell you when the thing you want is a script, which it usually is.
AIOps Advisor
Agent · AI & Automation
Anomaly detection, alert correlation and capacity forecasting on infrastructure telemetry — starting with whether you have a data problem instead of a model problem.
BGP Troubleshooter
Agent · Troubleshooting
CCIE-level BGP: isolates a fault to a layer, and designs the iBGP topology, convergence and policy architecture behind it.
Cisco IOS/IOS-XE · Cisco IOS XR · Cisco NX-OS
Change Request Writer
Agent · Operations
Turns a technical intent into a CAB-ready change request with a real rollback plan, a stated blast radius and verification steps.
Cisco IOS/IOS-XE · Cisco IOS XR · Cisco NX-OS
Check Point Expert
Agent · Operations
Check Point generalist on R82.x and the Management API. Asks for the release before giving a command, starts every drop at fw ctl zdebug drop, and refuses to believe an empty fw monitor until SecureXL acceleration has been ruled out.
Config Reviewer
Agent · Configuration
Reviews a pasted device configuration for risk, deviation and omission, and ranks findings by blast radius rather than by line number.
Cisco IOS/IOS-XE · Cisco IOS XR · Cisco NX-OS
Crypto Inventory Agent
Agent · Security Review
Finds and classifies the cryptography declared in the files you supply — algorithms, certificates, libraries, key sizes, TLS/SSH/IPsec settings — and says plainly what a text inventory cannot see.
Datacenter Fabric Designer
Agent · Design
Sizes and designs a Clos fabric with the numbers: oversubscription, BUM replication cost per VTEP, ARP suppression and the silent host it breaks, breakout port math, where inspection attaches and the hairpin it creates, and what the next 50% of growth costs.
Cisco NX-OS · Arista EOS · Juniper
Detection Engineer
Agent · Blue Team
Writes Sigma, YARA and Suricata rules that key on an invariant rather than a tool name, and measures the noise before anything is deployed.
F5 BIG-IP Expert
Agent · Operations
Triage first: the site is down can be eight different faults across LTM, DNS, ASM, APM or TMOS. Carries the packet's journey as a mental model and volunteers the facts that live between modules and nobody owns.
F5 BIG-IP
F5 iRule Analyzer
Agent · Configuration
Audits an existing iRule and measures instead of guessing: timing on and per-event cycle counts, the execution order across every rule on the virtual server, the missing release that hangs connections, and shared state that demotes CMP with nothing logged.
F5 BIG-IP
F5 iRule Troubleshooter
Agent · Troubleshooting
The iRule is deployed and behaving wrongly. Works from the symptom and from the box: TCL errors read precisely, the abort count nobody looks at, rule-profiler for the real event order, and the four things that change behaviour without appearing in the code.
F5 BIG-IP
F5 iRule Writer
Agent · Configuration
Writes iRules, and starts by trying to talk you out of needing one. Names the profile or LTM policy that does it compiled, and when TCL really is required, writes it with the per-request cost and the verification stated.
F5 BIG-IP
Firewall Policy Auditor
Agent · Security Review
Audits the MERGED effective rulebase — pre-rules included — plus decryption, identity and inspection, not just the security rules.
Palo Alto · Fortinet · Cisco ASA
Hardening Auditor
Agent · Security Review
Audits against CIS, STIG and NIST by exposure rather than control number — including the IPv6 first-hop security almost nobody deploys.
Cisco IOS/IOS-XE · Cisco IOS XR · Cisco NX-OS
Incident Responder
Agent · Blue Team
Works to NIST SP 800-61r3 and the CSF 2.0 Functions, with ransomware and BEC playbooks and the identity containment that a password reset does not achieve.
Kubernetes Manifest Writer
Agent · Configuration
Writes the manifest the workload actually needs and names the clause you did not know you were signing - QoS class, CPU throttling, the liveness probe that takes the service down.
Kubernetes Troubleshooter
Agent · Troubleshooting
Isolates a Kubernetes fault to its layer - scheduling, image, resources, probes, storage or control plane - and names the self-inflicted ones
MCP Server Builder
Agent · AI & Automation
Designs and builds MCP servers that expose infrastructure to AI assistants, with the blast radius and the context budget designed in rather than discovered.
MikroTik RouterOS Expert
Agent · Operations
Fixes the RouterOS version and the board model before answering anything, because v7 rewrote the routing stack and the board decides whether the switch chip offloads.
Network Architect
Agent · Design
Designs enterprise and campus networks from requirements, and states the trade-off behind every decision instead of hiding it.
Cisco IOS/IOS-XE · Cisco NX-OS · Juniper
OSPF Troubleshooter
Agent · Troubleshooting
CCIE-level OSPF: isolates an adjacency fault by its stuck state, and designs areas by database size and SPF cost rather than router count.
Cisco IOS/IOS-XE · Cisco IOS XR · Cisco NX-OS
Packet Capture Investigator
Agent · Troubleshooting
Only concludes what a packet supports, and cites the frame
Pentest Reporter
Agent · Security Review
Writes the report the engagement is judged on - and the one lawyers, insurers and acquirers will read. The coverage statement that distinguishes tested-and-clean from never-looked-at, severity against business risk, and the chain a scanner cannot see.
PQC Readiness Assessor
Agent · Security Review
Assesses whether an estate is ready to migrate to post-quantum cryptography — lifetime first, key exchange before signatures, and NOT DETERMINED where it cannot verify.
Prompt Engineer — Infrastructure
Agent · AI & Automation
Rewrites prompts about networks, firewalls, cloud and systems so the answer can be checked against a real device — and tells you when the task should not be a prompt at all.
Runbook to Agent
Agent · AI & Automation
Converts an operational runbook into an AGENT.md, classifying every step by risk — and reporting the runbook's gaps before converting anything.
Schema Migration Planner
Agent · Operations
Sequences a schema change across deploys so old and new application code both run - locks, backfills, and what cannot be rolled back
SQL Optimizer
Agent · Troubleshooting
Reads the execution plan before the query - finds the estimate gap, designs the index, and says what the fix costs
VPN Troubleshooter
Agent · Troubleshooting
CCIE Security level IPsec: works a fault phase by phase, and chooses the overlay, DMVPN phase and routing protocol behind it.
Cisco IOS/IOS-XE · Cisco ASA · Palo Alto
WAN & SD-WAN Designer
Agent · Design
Designs multi-transport WANs by site tier, and challenges the diversity claim before anything else — two carriers is not two paths.
Cisco IOS/IOS-XE · Fortinet · Palo Alto