
Research
/Security News
Trivy Under Attack Again: Widespread GitHub Actions Tag Compromise Exposes CI/CD Secrets
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.
@namch/agent-assistant
Advanced tools
Multi-agent orchestration framework for AI coding assistants (Cursor, Copilot, Antigravity, Claude Code).
Multi-agent orchestration for AI coding assistants
Transform one AI into a coordinated team of 20 specialist agents with structured workflows and 310+ domain skills.
| 🎯 Feature | What It Does |
|---|---|
| One-Time Setup, Forever Use | Configure once at global level (~/.cursor/, ~/.claude/, etc.) and it auto-applies to ALL your projects. No more repetitive config for every new repo. |
| Sub-Agent Orchestration | When supported (Claude Code, Cursor Max mode), the main agent spawns specialized sub-agents to handle tasks in parallel — backend, frontend, testing, security all working simultaneously. |
| Multi-Platform Support | Works seamlessly across Cursor, GitHub Copilot, Claude Code, and Antigravity/Gemini. Same workflows, any tool. |
| Matrix Skill Discovery | Automatically injects the right skills into each agent based on their profile and your request. 310+ skills, zero manual config. |
Code less, deliver more. Reduce token costs by 85%, cut bugs by 70%, and stop wasting time on repetitive tasks.
| Metric | Improvement |
|---|---|
| ⏰ Time-to-Production | 70% faster |
| 🐛 Bug Rate | 70% reduction |
| 💰 Token Cost | 85% savings |
# Clone
git clone https://github.com/hainamchung/agent-assistant.git
cd agent-assistant
# Install for your tool(s)
node cli/install.js install cursor # Cursor
node cli/install.js install claude # Claude Code
node cli/install.js install copilot # GitHub Copilot
node cli/install.js install antigravity # Antigravity/Gemini
node cli/install.js install --all # All tools
That's it. The framework installs globally and works across all your projects.
/docs:core # Technical docs for AI context
/docs:business # Business requirements
Creates ./documents/ files that agents reference. Without docs, agents work generically. With docs, they follow YOUR patterns.
/cook:fast "add dark mode toggle" # Simple feature
/cook:hard "implement OAuth 2.0" # Complex feature with all quality gates
/fix "payment fails on Safari" # Bug fix
/plan "build notification system" # Implementation plan
/test:hard "user registration flow" # Generate tests
/review "audit auth module" # Code review
| Variant | Use For | Agents |
|---|---|---|
:fast | Simple tasks | 2-3 agents |
:hard | Complex features | 5-8 agents + quality gates |
| Category | Commands |
|---|---|
| Build | /cook, /code, /fix |
| Quality | /test, /review, /debug |
| Plan | /plan, /brainstorm, /design |
| Docs | /docs:core, /docs:business, /docs:audit |
| Deploy | /deploy:check, /deploy:preview, /deploy:production |
| Domain | Agents |
|---|---|
| Implementation | backend-engineer, frontend-engineer, mobile-engineer, game-engineer |
| Architecture | tech-lead, database-architect |
| Quality | tester, reviewer, debugger, security-engineer |
| Planning | planner, brainstormer, business-analyst |
| Support | designer, devops-engineer, docs-manager, performance-engineer, researcher, scouter, project-manager |
Agents don't have hardcoded skills. They declare a profile, and the Matrix automatically injects relevant skills:
# Agent declares:
profile: "backend:execution"
# Matrix resolves → 20+ backend skills injected automatically
310+ skills across 19 domains. Add a new skill once, all relevant agents get it instantly.
agent-assistant/
├── agents/ # 20 specialist agents
├── commands/ # 40+ workflow commands
├── rules/ # 8 orchestration rules
├── matrix-skills/ # 19 domain skill registries
├── skills/ # 310+ domain skills
└── cli/ # Installer
| Tool | Status | Install Path |
|---|---|---|
| Cursor | ✅ Full | ~/.cursor/ |
| Claude Code | ✅ Full | ~/.claude/ |
| GitHub Copilot | ✅ Full | ~/.copilot/ |
| Antigravity | ✅ Full | ~/.gemini/ |
feat:, fix:, docs:) → PRIf this helps you ship faster, consider buying me a coffee!
Agent Assistant — Code less. Deliver more.
FAQs
Multi-agent orchestration framework for AI coding assistants (Cursor, Copilot, Antigravity, Claude Code, Codex) with Hybrid Skill Orchestration Layer (HSOL).
The npm package @namch/agent-assistant receives a total of 45 weekly downloads. As such, @namch/agent-assistant popularity was classified as not popular.
We found that @namch/agent-assistant demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.

Research
/Security News
We identified over 20 additional malicious extensions, along with over 20 related sleeper extensions, some of which have already been weaponized.