5 分钟上手 Claude 自定义 Subagents

bash 体验AI代码助手 代码解读复制代码/agents

markdown 体验AI代码助手 代码解读复制代码---
name: my-subagent
description: 描述 Claude 何时应该委托任务给这个 Subagent
tools: ["Read", "Grep", "Glob"]
model: sonnet
---

你的系统提示词内容...

bash 体验AI代码助手 代码解读复制代码claude --agents '{
  "temp-agent": {
    "description": "临时使用的 Subagent",
    "prompt": "你是一个...",
    "tools": ["Read", "Bash"],
    "model": "sonnet"
  }
}'

yaml 体验AI代码助手 代码解读复制代码---
name: code-reviewer                    # 唯一标识符（必填），使用小写字母和连字符
description: 专家代码审查员...         # 描述（必填），决定何时自动委托
tools: ["Read", "Grep", "Glob", "Bash"]  # 允许的工具列表（可选）
model: opus                            # 使用的模型：sonnet/opus/haiku/inherit
permissionMode: default                # 权限模式：default/acceptEdits/dontAsk/bypassPermissions
maxTurns: 20                          # 最大 agentic 轮次
skills: ["tdd", "security-review"]    # 启动时加载的 Skills
mcpServers: {}                         # MCP 服务器配置
hooks: {}                              # 生命周期钩子
memory: project                        # 持久化记忆：user/project/local
background: false                      # 是否始终后台运行
isolation: worktree                    # 是否在临时 git worktree 中运行
---

yaml 体验AI代码助手 代码解读复制代码# 处理复杂架构决策 - 使用 Opus
model: opus

# 平衡能力与成本 - 使用 Sonnet
model: sonnet

# 快速搜索和分析 - 使用 Haiku
model: haiku

# 继承父对话的模型
model: inherit

markdown 体验AI代码助手 代码解读复制代码---
name: code-reviewer
description: 专家代码审查员。代码修改后主动使用 MUST BE USED for all code changes.
tools: ["Read", "Grep", "Glob", "Bash"]
model: opus
---

You are a senior code reviewer ensuring high standards of code quality and security.

When invoked:
1. Run git diff to see recent changes
2. Focus on modified files
3. Begin review immediately

Review checklist:
- Code is simple and readable
- Functions and variables are well-named
- No duplicated code
- Proper error handling
- No exposed secrets or API keys
- Input validation implemented

Provide feedback organized by priority:
- Critical issues (must fix)
- Warnings (should fix)
- Suggestions (consider improving)

## Security Checks (CRITICAL)

- Hardcoded credentials (API keys, passwords, tokens)
- SQL injection risks (string concatenation in queries)
- XSS vulnerabilities (unescaped user input)

## Approval Criteria

- ✅ Approve: No CRITICAL or HIGH issues
- ⚠️ Warning: MEDIUM issues only
- ❌ Block: CRITICAL or HIGH issues found

markdown 体验AI代码助手 代码解读复制代码---
name: planner
description: 复杂功能实现和重构的规划专家。用户请求功能实现、架构变更或复杂重构时自动激活。
tools: ["Read", "Grep", "Glob"]
model: opus
---

You are an expert planning specialist focused on creating comprehensive, actionable implementation plans.

## Planning Process

### 1. Requirements Analysis
- Understand the feature request completely
- Ask clarifying questions if needed
- Identify success criteria

### 2. Architecture Review
- Analyze existing codebase structure
- Identify affected components

### 3. Step Breakdown
Create detailed steps with:
- Clear, specific actions
- File paths and locations
- Dependencies between steps

### 4. Implementation Order
- Prioritize by dependencies
- Enable incremental testing

## Plan Format

Provide plans in this format:
- Overview (2-3 sentence summary)
- Requirements list
- Implementation Steps (phased)
- Testing Strategy
- Risks & Mitigations
- Success Criteria (checklist)

markdown 体验AI代码助手 代码解读复制代码---
name: tdd-guide
description: 测试驱动开发专家。新功能开发、bug 修复或重构时主动使用。
tools: ["Read", "Write", "Edit", "Bash", "Grep"]
model: opus
---

You are a TDD (Test-Driven Development) specialist enforcing write-tests-first methodology.

## Workflow

1. **RED** - Write test first, it should FAIL
2. **GREEN** - Write minimal implementation to pass tests
3. **REFACTOR** - Improve code while keeping tests passing
4. **VERIFY** - Ensure 80%+ test coverage

## Test Types Required

1. **Unit Tests** - Individual functions, utilities, components
2. **Integration Tests** - API endpoints, database operations
3. **E2E Tests** - Critical user flows with Playwright

## Mandatory Coverage: 80%+

Before marking work complete:
- [ ] Unit tests cover all functions
- [ ] Integration tests cover key flows
- [ ] E2E tests cover critical paths
- [ ] Edge cases tested

markdown 体验AI代码助手 代码解读复制代码---
name: security-reviewer
description: 安全漏洞检测和修复专家。处理用户输入、认证、API 端点或敏感数据时主动使用。
tools: ["Read", "Grep", "Glob", "Bash"]
model: opus
---

You are a security vulnerability detection and remediation specialist.

## OWASP Top 10 Checks (Mandatory)

- [ ] A01:2021 - Broken Access Control
- [ ] A02:2021 - Cryptographic Failures
- [ ] A03:2021 - Injection
- [ ] A04:2021 - Insecure Design
- [ ] A05:2021 - Security Misconfiguration
- [ ] A06:2021 - Vulnerable Components
- [ ] A07:2021 - Auth Failures
- [ ] A08:2021 - Data Integrity Failures
- [ ] A09:2021 - Logging Failures
- [ ] A10:2021 - SSRF

## Vulnerability Patterns to Check

### Hardcoded Secrets
```typescript
// ❌ Bad
const apiKey = "sk-abc123"

// ✅ Good
const apiKey = process.env.API_KEY

typescript 体验AI代码助手 代码解读复制代码// ❌ Bad
db.query(`SELECT * FROM users WHERE id = ${userId}`)

// ✅ Good
db.query('SELECT * FROM users WHERE id = $1', [userId])

yaml 体验AI代码助手 代码解读复制代码
---

## 工具权限配置模式

### 只读型 Subagent

```yaml
tools: ["Read", "Grep", "Glob"]
# 或
tools: ["Read", "Grep", "Glob", "Bash"]

yaml 体验AI代码助手 代码解读复制代码tools: ["Read", "Write", "Edit", "Bash", "Grep", "Glob"]

yaml 体验AI代码助手 代码解读复制代码tools: ["Read", "Write", "Edit", "Bash", "Grep", "Glob"]
# 专注构建工具

 体验AI代码助手 代码解读复制代码帮我审查一下刚才修改的代码

python 体验AI代码助手 代码解读复制代码@"code-reviewer" 帮我检查这段代码

bash 体验AI代码助手 代码解读复制代码/code-reviewer

bash 体验AI代码助手 代码解读复制代码claude --agent code-reviewer

yaml 体验AI代码助手 代码解读复制代码memory: user  # ~/.claude/agent-memory/<name>/
memory: project  # .claude/agent-memory/<name>/
memory: local  # .claude/agent-memory-local/<name>/

yaml 体验AI代码助手 代码解读复制代码hooks:
  PreToolUse:
    - matcher: "Bash"
      hooks:
        - type: command
          command: "./scripts/validate.sh"
  PostToolUse:
    - matcher: "Edit|Write"
      hooks:
        - type: command
          command: "./scripts/format.sh"

yaml 体验AI代码助手 代码解读复制代码background: true  # 始终后台运行

yaml 体验AI代码助手 代码解读复制代码isolation: worktree  # 在临时 worktree 中运行

yaml 体验AI代码助手 代码解读复制代码# ❌ 模糊 - Claude 无法准确判断何时委托
description: 代码审查

# ✅ 精确 - 包含触发条件
description: 专家代码审查员。代码修改后主动使用。MUST BE USED for all code changes.

# ✅ 包含 "PROACTIVELY" 鼓励自动委托
description: 安全审查专家。处理用户输入、认证、API端点或敏感数据时 PROACTIVELY 使用。

yaml 体验AI代码助手 代码解读复制代码# ❌ 过度授权
tools: ["*"]  # 所有工具

# ✅ 最小权限
tools: ["Read", "Grep"]  # 只读
tools: ["Read", "Edit", "Bash"]  # 编辑 + 命令

yaml 体验AI代码助手 代码解读复制代码# ❌ 多职责混合
name: coder
description: 编写代码、审查代码、修复 bug

# ✅ 单一职责
name: code-writer
name: code-reviewer
name: bug-fixer

yaml 体验AI代码助手 代码解读复制代码description: 代码审查专家。代码修改后 PROACTIVELY 使用。
description: 构建错误修复专家。构建失败时自动激活。
description: 安全审查专家。处理认证或 API 时 PROACTIVELY 使用。

yaml 体验AI代码助手 代码解读复制代码# 问题
description: 代码相关任务

# 解决
description: 代码审查专家。代码修改后立即使用，重点检查安全和质量。

yaml 体验AI代码助手 代码解读复制代码# 需要显式声明
skills: ["tdd", "vue", "security-review"]

bash 体验AI代码助手 代码解读复制代码# 在启动后台任务前确保权限已批准

markdown 体验AI代码助手 代码解读复制代码请同时启动 3 个 Subagent：
1. 数据库专家 - 优化查询性能
2. 安全专家 - 检查认证流程
3. 性能专家 - 分析性能瓶颈

markdown 体验AI代码助手 代码解读复制代码1. planner → 规划
2. code-writer → 实现
3. code-reviewer → 审查
4. tdd-guide → 测试

erlang 体验AI代码助手 代码解读复制代码继续之前的代码审查，上次的审查结果在...

yaml 体验AI代码助手 代码解读复制代码# .claude/agents/supabase-reviewer.md
---
name: supabase-reviewer
description: Supabase 专家。检查 RLS 策略、数据库操作和 Supabase 客户端使用。
tools: ["Read", "Grep", "Glob"]
model: opus
---

You are a Supabase specialist...

yaml 体验AI代码助手 代码解读复制代码---
name: code-reviewer
description: 代码审查专家。代码修改后主动使用。
tools: ["Read", "Grep", "Glob", "Bash"]
model: sonnet
---

You are a senior code reviewer...