
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A standardized, portable definition format for collaborative AI agents.
agent-def provides TypeScript/Zod schemas for defining agent configurations that can be validated, serialized as YAML frontmatter (agent.md files), and deployed across environments.
Core schemas:
AgentDefinition - Identity, model, tools, groups, and instructionsAgentConfiguration - Extends definition with services and runtime metadataGroup - Organizational units (teams, projects, clusters)Identity: Agent, tool, and group IDs can be simple strings (e.g., backend-architect) or more complex structures ( e.g. DIDs (Decentralized Identifiers), etc).
npm install agent-def
import { AgentDefinitionSchema, AgentConfigurationSchema } from "agent-def";
// Parse an agent definition
const agentDef = AgentDefinitionSchema.parse({
id: "backend-architect",
name: "Backend System Architect",
modelId: "openai/gpt-4",
toolIds: ["filesystem", "database-analyzer"],
groupIds: ["team:backend", "project:api-v2"],
agentIds: ["database-specialist"],
instructions: "You are a backend system architect...",
});
// Extend with deployment configuration
const agentConfig = AgentConfigurationSchema.parse({
...agentDef,
services: [
{ type: "mcp", id: "filesystem", url: "http://localhost:3000/mcp/fs" },
{
type: "a2a",
id: "database-specialist",
url: "https://agents.example.com/db",
},
],
metadata: { environment: "production", region: "us-east-1" },
});
Store definitions as markdown files with YAML frontmatter:
---
id: backend-architect
name: Backend System Architect
modelId: openai/gpt-4
toolIds: [filesystem, database-analyzer]
groupIds: [team:backend, project:api-v2]
agentIds: [database-specialist, security-auditor]
---
You are a backend system architect specializing in scalable API design.
Focus on RESTful patterns, microservice boundaries, and database optimization.
# Build the library
npm run build
# Generate JSON Schema
npm run generate:schema
# Run tests
npm test
# Lint code
npm run lint
The goal is to eventually merge more definitions (e.g. ProjectNanda Agent Definitions, Agency definitions) into a unified spec. This consolidation will enable consistent agent definitions, discovery, sharing, and simplified tooling across the artinet.
We welcome contributions from the community! Whether you want to:
Please read our Contributing Guide to get started. All contributors are recognized and appreciated.
Apache-2.0
FAQs
A standardized definition for collaborative agents.
We found that agent-def demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.