Skip to Content
DojOps — AI DevOps Automation Engine. Learn more →
ComponentsSpecialist Agents

Specialist Agents

DojOps includes 16 built-in specialist agents for intelligent prompt routing, plus support for user-defined custom agents. Each agent is a domain expert with a tailored system prompt, keyword set, and optional tool dependencies.


How Routing Works

When you send a prompt to DojOps, the AgentRouter scores it against each agent’s keyword list:

  1. Keyword matching — Each agent has a set of domain-specific keywords. The router counts how many keywords appear in the prompt.
  2. Confidence scoring — The score is normalized based on keyword match density. Higher scores indicate stronger domain relevance.
  3. Threshold check — If the highest-scoring agent exceeds the confidence threshold, the prompt is routed to that specialist.
  4. Fallback — If no agent exceeds the threshold, the prompt goes to the general-purpose DevOpsAgent.

The selected agent’s system prompt is prepended to the LLM request, providing domain-specific instructions and constraints.


Agent List

#AgentDomainDescription
1ops-cortexorchestrationTask decomposition, cross-domain routing, dependency ordering, strategy, roadmap, migration planning
2terraform-specialistinfrastructureTerraform, HCL, modules, state management, workspaces, providers, cost optimization
3kubernetes-specialistcontainer-orchestrationDeployments, Helm, RBAC, autoscaling, service mesh, ingress, operators, CRDs
4cicd-specialistci-cdGitHub Actions, GitLab CI, Jenkins, build optimization, pipelines, artifacts, caching
5security-auditorsecurityVulnerability scanning, secret management, IAM, RBAC, CVEs, threat modeling, encryption
6observability-specialistobservabilityPrometheus, Grafana, Datadog, tracing, SLOs, SLIs, alerting, OpenTelemetry, logging
7docker-specialistcontainerizationMulti-stage builds, image optimization, registries, BuildKit, Compose, distroless images
8cloud-architectcloud-architectureAWS/GCP/Azure design, cost optimization, migration strategies, serverless, well-architected
9network-specialistnetworkingDNS, load balancers, VPN, CDN, service mesh, firewall rules, VPC, subnets, proxies
10database-specialistdata-storagePostgreSQL, MySQL, Redis, DynamoDB, MongoDB, replication, backup, migration, schema design
11gitops-specialistgitopsArgoCD, Flux, drift detection, sealed secrets, progressive delivery, reconciliation
12compliance-auditorcomplianceSOC2, HIPAA, PCI-DSS, GDPR, policy-as-code (OPA/Rego), Kyverno, CIS benchmarks
13ci-debuggerci-debuggingLog analysis, root cause diagnosis, flaky test detection, error classification
14appsec-specialistapplication-securityOWASP Top 10, SAST/DAST, code review, pentest methodology, Snyk, Trivy, Gitleaks
15shell-specialistshell-scriptingBash/POSIX, ShellCheck, error handling, cron, automation, sed, awk, pipefail
16python-specialistpython-scriptingType hints, pytest, Poetry, async, Flask, Django, FastAPI, mypy, ruff

Keywords Reference

Each agent is matched by the following keyword sets:

AgentKeywords
ops-cortexplan, decompose, break down, steps, orchestrate, coordinate, multi-step, project, strategy, roadmap, migration plan, goal, end-to-end, full stack
terraform-specialistterraform, infrastructure, iac, hcl, provision, resource, module, state, backend, workspace, tf, provider, data source, output, variable
kubernetes-specialistkubernetes, k8s, pod, deployment, service, helm, ingress, namespace, kubectl, statefulset, daemonset, hpa, kustomize, operator, crd
cicd-specialistci, cd, pipeline, github actions, build, deploy, release, continuous, jenkins, gitlab ci, artifact, workflow, cache, matrix, runner
security-auditorsecurity, audit, vulnerability, secret, scan, firewall, iam, rbac, cve, threat, penetration, hardening, encryption, tls, certificate
observability-specialistmonitoring, logging, alerting, tracing, prometheus, grafana, datadog, observability, metrics, dashboard, slo, sli, opentelemetry, loki, elk
docker-specialistdocker, dockerfile, container, image, compose, registry, ecr, gcr, buildkit, multi-stage, distroless, alpine, buildx, layer
cloud-architectaws, gcp, azure, cloud, architect, serverless, lambda, s3, ec2, vpc, region, cost, well-architected, migration, landing zone, multi-cloud
network-specialistdns, load balancer, vpn, vpc, subnet, cdn, nginx, traefik, route53, peering, proxy, network, gateway, ssl, http
database-specialistdatabase, postgres, mysql, redis, dynamodb, mongodb, rds, cache, backup, replication, migration, schema, sql, nosql, elasticsearch
gitops-specialistgitops, argocd, flux, reconciliation, sync, promotion, drift, declarative, sealed secrets, sops, rollout, flagger, kustomization, image automation
compliance-auditorcompliance, soc2, hipaa, pci, gdpr, policy, governance, regulation, opa, rego, kyverno, sentinel, cis benchmark, audit trail
ci-debuggerdebug, error, failed, failure, log, broken, fix, timeout, flaky, crash, exit code, stack trace, oom, ci error
appsec-specialistappsec, owasp, xss, injection, csrf, ssrf, pentest, sast, dast, code review, secure coding, exploit, snyk, trivy, gitleaks
shell-specialistbash, shell, shellcheck, sh, zsh, posix, script, cron, sed, awk, grep, pipefail, trap, shebang
python-specialistpython, pip, pytest, mypy, ruff, poetry, venv, asyncio, flask, django, fastapi, pep8, pylint, typer

Tool Dependencies

Some agents declare external tool dependencies that enhance their capabilities:

AgentTool Dependency
terraform-specialisthcl2json
kubernetes-specialistyaml-lint
cicd-specialistyaml-lint
security-auditorsnyk
docker-specialistdockerfilelint
gitops-specialistyaml-lint
compliance-auditor@open-policy-agent/opa-wasm
appsec-specialistsnyk
shell-specialistshellcheck
python-specialistpyright

Using Agents

CLI

# List all agents dojops agents list # Show agent details dojops agents info terraform-specialist # Pin chat to an agent dojops chat --agent=terraform

API

# List all agents curl http://localhost:3000/api/agents

Automatic Routing

Agents are selected automatically based on prompt content. No manual routing is needed:

# Routes to terraform-specialist (matches: terraform, s3, iac) dojops "Create a Terraform config for S3" # Routes to kubernetes-specialist (matches: kubernetes, deployment, nginx) dojops "Write a Kubernetes deployment for nginx" # Routes to cicd-specialist (matches: github actions, pipeline, ci) dojops "Set up GitHub Actions CI pipeline" # Routes to ops-cortex (matches: plan, multi-step, end-to-end) dojops plan "Set up end-to-end CI/CD with Docker and Kubernetes"

Custom Agents

In addition to the 16 built-in agents, you can create your own custom agents. Custom agents participate in the same keyword-based routing as built-in agents and can even override built-in agents by name.

Agent Definition Format

Each custom agent is a directory with a structured README.md:

.dojops/agents/sre-specialist/README.md
# SRE Specialist ## Domain site-reliability ## Description SRE specialist for incident response, reliability engineering, and observability. ## System Prompt You are an SRE specialist. You specialize in: - Incident response and post-mortems - SLO/SLI design and error budgets - Chaos engineering and resilience testing - On-call runbooks and escalation procedures - Capacity planning and performance optimization When asked about infrastructure, focus on reliability patterns... ## Keywords sre, incident, reliability, error budget, slo, chaos, postmortem, runbook, on-call, resilience

Required sections: ## Domain, ## Description, ## System Prompt, ## Keywords (comma-separated).

Discovery Paths

Custom agents are discovered from two locations:

LocationPathScope
Project.dojops/agents/<name>/README.mdCurrent project only
Global~/.dojops/agents/<name>/README.mdShared across all projects

Project agents override global agents with the same name.

Creating Custom Agents

LLM-generated (recommended):

dojops agents create "an SRE specialist for incident response and reliability"

The LLM generates a complete agent definition (name, domain, description, system prompt, keywords) and writes the README.md to .dojops/agents/<name>/.

Manual creation:

dojops agents create --manual

Interactive prompts guide you through defining name, domain, description, system prompt, and keywords.

Global agents (shared across projects):

dojops agents create --global "a cost optimization specialist"

Managing Custom Agents

# List all agents (built-in + custom) dojops agents list # Show agent details (includes source path for custom agents) dojops agents info sre-specialist # Remove a custom agent dojops agents remove sre-specialist

Routing with Custom Agents

Custom agents are routed exactly like built-in agents — by keyword matching. If a custom agent’s keywords match the prompt with higher confidence than any built-in agent, the custom agent handles the request:

# Routes to custom sre-specialist (matches: sre, error budget, slo) dojops "Design SLOs and error budgets for our payment service"

Built-in Agent Configuration

Built-in agents are defined in packages/core/src/agents/specialists.ts. Each agent specifies:

  • name — Unique identifier
  • domain — Category label
  • description — System prompt context
  • keywords — Array of matching keywords for routing
  • toolDependencies — Optional external tools

All agents include a NO_FOLLOWUP_INSTRUCTION suffix ensuring single-shot responses without conversational follow-ups.


Specialized Analyzers

In addition to the 16 routed agents, DojOps provides three specialized analyzers that are invoked directly (not via AgentRouter):

AnalyzerClassInputOutput SchemaCLI Command
CI DebuggerCIDebuggerCI log contentCIDiagnosisSchemadojops debug ci
Infra DiffInfraDiffAnalyzerDiff contentInfraDiffAnalysisSchemadojops analyze diff
DevOps CheckerDevOpsCheckercontext.json + filesCheckReportSchemadojops check

DevOps Checker

The DevOpsChecker (packages/core/src/agents/devops-checker.ts) analyzes DevOps files detected during dojops init for quality, security, and best practices. It produces:

  • Maturity score (0-100) — Minimal (0-25), Basic (26-50), Good (51-75), Excellent (76-100)
  • Findings — Severity-ranked issues (critical, error, warning, info) categorized as security, quality, best-practice, performance, or reliability
  • Missing files — Important DevOps files the project should have but doesn’t
dojops check # Display formatted report dojops check --output json # Machine-readable JSON output