Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
Sichere ProgrammierungLINQ GroupBy: The Operator Everyone Uses Wrong(23.09.2026 um 09:41 Uhr)
Sichere ProgrammierungIT Heard About the Acquisition Nine Days Before It Closed(23.09.2026 um 09:45 Uhr)
Sichere ProgrammierungThe Story Behind Building NuvyntraLabs(23.09.2026 um 09:45 Uhr)
Sichere ProgrammierungFive dashboards nobody was opening(23.09.2026 um 09:46 Uhr)
Sichere ProgrammierungThe Shift from AI Insights to AI Actions in Finance(23.09.2026 um 09:47 Uhr)
Sichere ProgrammierungGo WebAssembly Meets WebForms Core 2.1(23.09.2026 um 09:49 Uhr)
Sichere ProgrammierungJust One More Round: Scope Creep in the Age of AI Agents(23.09.2026 um 09:50 Uhr)
Sichere ProgrammierungThe Calls That Reach Us Now Are the Ones the Model Could Not Answer(23.09.2026 um 09:50 Uhr)
Sichere ProgrammierungOne Loop Made Four Hundred Round Trips(23.09.2026 um 09:52 Uhr)
Sichere ProgrammierungThe order was committed and nothing else ever heard about it(23.09.2026 um 09:53 Uhr)
Sichere ProgrammierungLINQ GroupBy: The Operator Everyone Uses Wrong(23.09.2026 um 09:41 Uhr)
Sichere ProgrammierungIT Heard About the Acquisition Nine Days Before It Closed(23.09.2026 um 09:45 Uhr)
Sichere ProgrammierungThe Story Behind Building NuvyntraLabs(23.09.2026 um 09:45 Uhr)
Sichere ProgrammierungFive dashboards nobody was opening(23.09.2026 um 09:46 Uhr)
Sichere ProgrammierungThe Shift from AI Insights to AI Actions in Finance(23.09.2026 um 09:47 Uhr)
Sichere ProgrammierungGo WebAssembly Meets WebForms Core 2.1(23.09.2026 um 09:49 Uhr)
Sichere ProgrammierungJust One More Round: Scope Creep in the Age of AI Agents(23.09.2026 um 09:50 Uhr)
Sichere ProgrammierungThe Calls That Reach Us Now Are the Ones the Model Could Not Answer(23.09.2026 um 09:50 Uhr)
Sichere ProgrammierungOne Loop Made Four Hundred Round Trips(23.09.2026 um 09:52 Uhr)
Sichere ProgrammierungThe order was committed and nothing else ever heard about it(23.09.2026 um 09:53 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

Building a Production-Grade AI Agent Library: YAML Schemas, Composable Pipelines, and 6-Runtime Support

Most AI agent libraries are just folders of markdown files. You get prompts. Maybe nice formatting. But no way to know programmatically: What tools the agent actually requires to run What context it needs as input What format its output…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

Most AI agent libraries are just folders of markdown files.



You get prompts. Maybe nice formatting. But no way to know programmatically:




  • What tools the agent actually requires to run

  • What context it needs as input

  • What format its output will be in

  • Which agent should run next in a pipeline



I spent the last few weeks building operator-agents to fix this. Here's what I learned.






The Core Problem: Agents as Unstructured Prompts



Take any popular agent library. Clone it. Look at a file:




# Senior Developer Agent

You are a senior developer. Review code carefully. Consider security, performance, and maintainability...






This works for a human reading it. But for a pipeline orchestrator or an automation tool? It's opaque. You can't programmatically answer "what does this agent need to run?" or "what should happen after it finishes?"






The Solution: AGENT_SPEC.md



I designed a YAML frontmatter schema that every agent in the library must implement:




---
name: senior-developer
display_name: Senior Developer
version: 1.0.0
category: engineering
vertical: null
runtimes:
- claude-code
- codex
- gemini-cli
- cursor
- aider
- raw
tools:
required:
- name: file_system
type: file
description: "Read and write code files"
- name: terminal
type: cli
description: "Run linters, tests, build commands"
optional:
- name: database_client
type: db
description: "Inspect schemas and query data"
context:
required:
- key: task_description
description: "What needs to be reviewed or built"
example: "Review the authentication module for security issues"
optional:
- key: existing_code
description: "Codebase context"
output:
format: markdown
schema: null
example: |
## Code Review: auth.ts
**Critical:** SQL injection risk on line 47...
pipeline:
handoff_to:
- agent: reality-checker
condition: When implementation is complete
- agent: project-shepherd
condition: When blockers are found
parallel_with: []
tags: [architecture, review, adr, senior]
author: operator-agents
license: MIT
---






Now any tool can parse this. Want all agents that require a terminal? One grep. Want to build a pipeline that routes to the right agent based on output? Read pipeline.handoff_to.






66 Agents, 10 Divisions, 5 Verticals



The library ships with 66 agents organized into:



Core divisions: Engineering (7), Design (6), Marketing (8), Product (3), Project Management (5), Testing (7), Support (6), Operations (3), Specialized (3)



Verticals: E-Commerce (5), SaaS (4), Agency (3), Finance (3), Automation (3)



The vertical agents are domain-specific. For example, invoice-processor in the Finance vertical understands DATEV format for German accounting. n8n-workflow-builder generates actual importable n8n workflow JSON — not pseudocode.






Composable Pipelines



The library includes 5 pipeline definitions. Here's the ecommerce ops pipeline:




graph TD
A[ops-manager] -->|order_processed| B[customer-lifecycle]
B -->|revenue_data_ready| C[finance-tracker]
C -->|performance_metrics| D[analytics-reporter]
A -->|payment_failed| E[error-handler]






Each pipeline stage defines typed data contracts:




{
"from_agent": "ops-manager",
"to_agent": "customer-lifecycle",
"handoff_context": {
"order_id": "ORD-12345",
"status": "fulfilled",
"customer_email": "[email protected]",
"trigger": "post_purchase_flow"
},
"next_agent": "customer-lifecycle"
}






This makes orchestration deterministic: the next agent knows exactly what it's receiving.






6 Runtime Support



The library isn't locked to Claude Code. Install script auto-detects your runtime:




./scripts/install.sh
# Detects: claude-code, codex, gemini-cli, cursor, aider
# Installs to the correct path for your runtime






For raw API usage, strip the YAML frontmatter:




./scripts/strip-frontmatter.sh agents/engineering/senior-developer.md
# Outputs clean system prompt, no frontmatter









Validation



Every agent must pass the spec validator before merge:




./scripts/validate-agents.sh
# Checks: frontmatter fields, required sections, runtime declarations






CI runs this automatically via .github/workflows/validate.yml.






What's Next



The next step is building a runtime-agnostic orchestrator that reads agent-index.json and routes tasks automatically based on agent schemas. The data is all there — parse-agents.sh --output json generates a complete index.



If you're building multi-agent systems, I'd love feedback on the pipeline protocol and schema design.



Repo: https://github.com/fatihkutlar/operator-agents

v1.0.0 Release: https://github.com/fatihkutlar/operator-agents/releases/tag/v1.0.0






66 agents, MIT licensed, contributions welcome.

Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Building a Production-Grade AI Agent Library: YAML Schemas, Composable Pipelines, and 6-Runtime Support

Thematisch verwandte Begriffe: Building, ProductionGrade, Agent, Library · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-96258 | A vulnerability has been found in onSite internet GmbH Auktion NG Auktio…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick