
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
convoke-agents
Advanced tools
██████╗ ██████╗ ███╗ ██╗██╗ ██╗ ██████╗ ██╗ ██╗███████╗
██╔════╝██╔═══██╗████╗ ██║██║ ██║██╔═══██╗██║ ██╔╝██╔════╝
██║ ██║ ██║██╔██╗ ██║██║ ██║██║ ██║█████╔╝ █████╗
██║ ██║ ██║██║╚██╗██║╚██╗ ██╔╝██║ ██║██╔═██╗ ██╔══╝
╚██████╗╚██████╔╝██║ ╚████║ ╚████╔╝ ╚██████╔╝██║ ██╗███████╗
╚═════╝ ╚═════╝ ╚═╝ ╚═══╝ ╚═══╝ ╚═════╝ ╚═╝ ╚═╝╚══════╝
Agent teams for complex systems
Convoke extends AI agents with two types of installable modules: Teams bring new agents for a domain, Skills add new capabilities to existing agents. Install them independently or combine them.
| Team | Agents | Domain |
|---|---|---|
| Vortex | 7 agents, 22 workflows | Product discovery — from user insight to evidence-based decisions |
| Gyre | 4 agents, 7 workflows | Production readiness — from stack detection to gap analysis |
/bmad-team-factory)validateSkill() quality gate in the update system for factory-generated skills (development docs)7 agents guide you from insight to evidence and back again — a continuous discovery loop, not a one-shot checklist
Vortex guides you through seven discovery streams — from understanding your users to interpreting production signals — so you can make evidence-based decisions before, during, and after you build. Each stream builds on the previous one's findings, and when gaps appear, the system routes you back to fill them.
7 Streams · 7 Agents
┌─────────────┐ ┌─────────────┐ ┌─────────────┐ ┌─────────────┐
│ Isla │──▶│ Mila │──▶│ Liam │──▶│ Wade │
│ Empathize │ │ Synthesize │ │ Hypothesize │ │ Externalize │
└─────────────┘ └─────────────┘ └─────────────┘ └─────────────┘
▲ │
│ │
│ ▼
┌─────────────┐ ┌─────────────┐ ┌─────────────┐ │
│ Emma │◀──│ Max │◀──│ Noah │◀───────────┘
│Contextualize│ │ Systematize │ │ Sensitize │
└─────────────┘ └─────────────┘ └─────────────┘
│ │ │
└─────────────────┴─────────────────┘
▶ Start at Emma · back to any stream
Each workflow ends with a Compass routing to whichever stream needs attention — you can start or return to any agent.
| Agent | Stream | What they do |
|---|---|---|
| Emma 🎯 | Contextualize | Frame the right problem — personas, product vision, scope |
| Isla 🔍 | Empathize | Understand users — empathy maps, interviews, discovery research |
| Mila 🔬 | Synthesize | Converge research into clear problem definitions |
| Liam 💡 | Hypothesize | Turn problems into testable hypotheses and experiments |
| Wade 🧪 | Externalize | Test assumptions with MVPs, experiments, and prototypes |
| Noah 📡 | Sensitize | Interpret production signals, user behavior, and engagement patterns |
| Max 🧭 | Systematize | Capture learnings and decide: pivot, patch, or persevere |
Here's a sample of real output from a busy parents meal planning project — each excerpt is from the full 7-agent journey example.
Emma frames the right problem. Here's the Job-to-be-Done she produced:
Job-to-be-Done: Eliminate the daily 5:30 PM dinner decision so I can feed my family well without the mental load of planning, shopping, and deciding under time pressure.
Riskiest Assumptions:
- Decision fatigue — not cooking skill or ingredient access — is the primary barrier to weeknight dinner success
- Parents would trust and act on an externally-provided dinner suggestion rather than needing to choose themselves
- "Good enough" nutrition is an acceptable standard — parents aren't seeking perfection, they're seeking relief from guilt
Liam turns problems into testable ideas. Here's one of three hypotheses he produced:
Hypothesis 1: The Pre-Commute Decision Eliminator
We believe that busy parents will act on a single dinner suggestion delivered at 4:00 PM within 3 minutes because the decision burden — not cooking — is their primary barrier, and an earlier intervention catches them before the anxiety spiral begins.
Riskiest Assumption: Parents will trust and act on an automated suggestion without second-guessing. Research shows they want "someone to tell me what to make" — but "someone" may need to be a trusted person, not an algorithm.
Max captures what you learned and decides what to do next:
Recommendation: PATCH (iterate on timing, don't pivot direction)
The core hypothesis is validated. The product direction (decision elimination via single suggestion) is correct. The timing mechanism needs refinement — shift from fixed 4:00 PM delivery to adaptive delivery based on each user's observed engagement pattern.
Three Actions:
- Implement adaptive timing — shift the push notification to match each user's observed engagement window.
- Route to Isla for timing investigation — qualitative research on why users engage at 3:15 PM. Is it anxiety relief, logistical planning, or habit?
- Test willingness to pay immediately — the mechanism works, but we have no commercial validation. Run a landing page test with pricing before further product investment.
See the full 7-agent journey example →
For detailed workflow descriptions, see the Agent Guide and individual user guides: Emma | Isla | Mila | Liam | Wade | Noah | Max
4 agents assess whether your project is ready to ship — detect your stack, model what "ready" means, find what's missing, and refine together
Most teams ship to production without knowing if they're actually ready — missing SLOs, incomplete observability, unreviewed deployment strategies. Gyre analyzes your project's filesystem, builds a capabilities model tailored to your specific tech stack, and surfaces what's absent. No generic checklists — every finding is contextual to your project.
4 Agents · 4 Contracts
┌─────────────┐ ┌─────────────┐ ┌─────────────┐ ┌─────────────┐
│ Scout │──▶│ Atlas │──▶│ Lens │──▶│ Coach │
│ Detect │ │ Model │ │ Analyze │ │ Review │
│ Stack │ │ Capabil. │ │ Gaps │ │ Refine │
└─────────────┘ └──────▲──────┘ └─────────────┘ └──────┬──────┘
│ │
└────────────── GC4 ────────────────┘
feedback
Linear pipeline with a feedback loop. Coach amendments feed back to Atlas — the model improves with every review.
| Agent | Role | What they do |
|---|---|---|
| Scout 🔎 | Detect | Scan filesystem artifacts to classify your tech stack — language, containers, CI/CD, observability, cloud provider |
| Atlas 📐 | Model | Generate a capabilities manifest using industry standards (DORA, OpenTelemetry, Google PRR) and web search |
| Lens 🔬 | Analyze | Compare capabilities against what actually exists — surface absences, compound risks, severity-prioritized findings |
| Coach 🏋️ | Review | Walk through findings conversationally — amend the model, capture feedback, track progress over time |
Gyre writes structured artifacts to .gyre/ in your project root — safe to commit, containing technology categories only (no file contents, paths, or secrets):
.gyre/stack-profile.yaml) — classified tech stack with detection confidence.gyre/capabilities.yaml) — 20+ capabilities across observability, deployment, reliability, and security.gyre/findings.yaml) — absence-based findings tagged by severity, confidence, and source.gyre/feedback.yaml) — team amendments that persist and improve the model over timeThree modes: Crisis (first run, full pipeline), Anticipation (re-analysis with cached model), Regeneration (fresh model rebuild).
Delta tracking: Run Gyre after making improvements to see what you've resolved — findings are tagged [NEW], [CARRIED], or resolved.
User guides: Scout | Atlas | Lens | Coach
Create fully-wired, BMAD-compliant teams through a guided workflow — zero post-creation fixes.
/bmad-team-factory
The factory guides you through composition pattern selection (Independent or Sequential), agent scope definition with overlap detection, contract design, and integration wiring. Decision state is persisted as a spec file for resume and express mode. Output passes the same validation as native teams.
Three capabilities:
Skills give existing agents new workflows — installed via menu patching, not agent modification. The first skill adds RICE-scored backlog management to the PM agent:
Initiatives Backlog
┌─────────────┐ ┌─────────────┐ ┌─────────────┐
│ [T] Triage │ │ [R] Review │ │ [C] Create │
│ Ingest new │ │ Rescore │ │ Bootstrap │
│ findings │ │ existing │ │ from scratch│
└──────┬──────┘ └──────┬──────┘ └──────┬──────┘
│ │ │
▼ ▼ ▼
┌──────────────────────────────────────────────────┐
│ initiatives-backlog.md │
│ RICE-scored · Categorized · Change-tracked │
└──────────────────────────────────────────────────┘
Activate from the PM agent menu or directly: /bmad-enhance-initiatives-backlog
The Enhance Guide documents the complete pattern for building your own skills.
Everything (Vortex + Gyre):
npm install convoke-agents && npx -p convoke-agents convoke-install
Vortex only:
npm install convoke-agents && npx -p convoke-agents convoke-install-vortex
Gyre only:
npm install convoke-agents && npx -p convoke-agents convoke-install-gyre
Something not working? Run npx -p convoke-agents convoke-doctor or check the FAQ.
Open _bmad/bme/_vortex/config.yaml (or _bmad/bme/_gyre/config.yaml) and replace {user} with your name. Agents use this to personalize their interactions.
Claude Code (skills)
# Vortex
/bmad-agent-bme-contextualization-expert # Emma 🎯
/bmad-agent-bme-discovery-empathy-expert # Isla 🔍
/bmad-agent-bme-research-convergence-specialist # Mila 🔬
/bmad-agent-bme-hypothesis-engineer # Liam 💡
/bmad-agent-bme-lean-experiments-specialist # Wade 🧪
/bmad-agent-bme-production-intelligence-specialist # Noah 📡
/bmad-agent-bme-learning-decision-expert # Max 🧭
# Gyre
/bmad-agent-bme-stack-detective # Scout 🔎
/bmad-agent-bme-model-curator # Atlas 📐
/bmad-agent-bme-readiness-analyst # Lens 🔬
/bmad-agent-bme-review-coach # Coach 🏋️
Claude Code (terminal) / Other AI assistants
# Vortex
cat _bmad/bme/_vortex/agents/contextualization-expert.md # Emma 🎯
# ... (see user guides for full list)
# Gyre
cat _bmad/bme/_gyre/agents/stack-detective.md # Scout 🔎
cat _bmad/bme/_gyre/agents/model-curator.md # Atlas 📐
cat _bmad/bme/_gyre/agents/readiness-analyst.md # Lens 🔬
cat _bmad/bme/_gyre/agents/review-coach.md # Coach 🏋️
Claude.ai — Open any agent file and paste its contents into your conversation.
How activation works: Each agent is a markdown file containing a full persona, menu system, and workflow instructions. When Claude reads the file, it adopts that agent's expertise and presents you with an interactive menu. Pick a workflow from the menu and follow the guided steps.
{user} with your name_bmad-output/vortex-artifacts/ or .gyre/your-project/
├── _bmad/bme/
│ ├── _vortex/ # Team: Product Discovery
│ │ ├── agents/ # 7 agent definition files
│ │ ├── workflows/ # 22 workflows
│ │ ├── contracts/ # Handoff contracts (HC1-HC5 artifact, HC6-HC10 routing)
│ │ ├── guides/ # User guides (all 7 agents)
│ │ └── config.yaml # Configuration
│ ├── _gyre/ # Team: Production Readiness
│ │ ├── agents/ # 4 agent definition files
│ │ ├── workflows/ # 7 workflows
│ │ ├── contracts/ # Artifact contract schemas (GC1-GC4)
│ │ ├── guides/ # User guides (all 4 agents)
│ │ └── config.yaml # Configuration
│ └── _enhance/ # Skill: Agent Capability Upgrades
│ ├── workflows/ # Skill workflows (initiatives-backlog)
│ ├── extensions/ # Agent menu patch descriptors
│ ├── guides/ # Module author guide
│ └── config.yaml # Configuration
└── _bmad-output/
├── vortex-artifacts/ # Vortex generated artifacts
└── gyre-artifacts/ # Gyre generated artifacts
Convoke handles discovery, validation, and readiness. BMAD Core handles implementation.
Convoke Modules BMAD Core
┌──────────────────────────────┐ ┌──────────────────────┐
│ Teams │ │ │
│ Vortex (Product Discovery) │ ──────> │ PM → Architect → Dev │
│ Gyre (Prod. Readiness) │ <────── │ "Let's build it" │
│ │ │ │
│ Skills │ signals │ │
│ Enhance (Agent Upgrades) │ ──────> │ │
│ │ │ │
└──────────────────────────────┘ └──────────────────────┘
Teams and Skills are peer module types — both installable, both independent. Convoke works standalone or as an extension — no BMAD Method installation required.
npx -p convoke-agents convoke-version # Check current version
npx -p convoke-agents convoke-update --dry-run # Preview changes
npx -p convoke-agents convoke-update # Apply update (auto-backup)
npx -p convoke-agents convoke-doctor # Diagnose issues
Your data in _bmad-output/ and .gyre/ is never touched. Automatic backups are created before every update.
Tip: If
npx convoke-updatereports "Already up to date" but you know a newer version exists, npx may be serving a cached copy. Force the latest with:npx -p convoke-agents@latest convoke-update --yes
See UPDATE-GUIDE.md for migration paths and troubleshooting.
| Document | Description |
|---|---|
| Agent Guide | Detailed agent descriptions, workflows, and positioning |
| BMAD Compatibility | Compatibility matrix with BMAD Method versions |
| Testing | Automated test suite, CI pipeline, and agent test results |
| Development Guide | Architecture, building agents, and contributing |
| FAQ | Common questions about the framework |
| CHANGELOG | Complete version history |
| UPDATE-GUIDE | Migration paths and update troubleshooting |
convoke-*. Package: convoke-agentsWe welcome contributions in these areas:
Have feedback? Found a quality issue, want a missing capability, or have a general comment about an agent? Open an issue and select the Agent/Workflow Feedback template.
See the Development Guide for architecture details and agent development patterns.
MIT License — see LICENSE
Every agent below contributed to the design, implementation, testing, or documentation of this release.
Core
BMM — BMAD Method Module
BME — Vortex Pattern Agents
BME — Gyre Pattern Agents
CIS — Creative & Innovation Strategies
BMB — BMAD Builder Module
TEA — Test Engineering & Architecture
Discover what has to be discovered. Ship what's ready to ship.
Get Started | Agents | Docs | Roadmap
FAQs
Agent teams for complex systems, compatible with BMad Method
The npm package convoke-agents receives a total of 66 weekly downloads. As such, convoke-agents popularity was classified as not popular.
We found that convoke-agents demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.