007
無料Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
日本語の概要は準備中です。原文の説明を表示しています。
A2A agent card JSON templates with schema validation and examples for different agent types. Use when creating agent cards, implementing A2A protocol discovery, setting up agent metadata, configuring authentication schemes, defining agent capabilities, or when user mentions agent card, agent discovery, A2A metadata, service endpoint configuration, or agent authentication setup.
インストールする前に、エージェントに与えられる指示の中身を確認できます。
Purpose: Provide reusable JSON templates for creating A2A (Agent-to-Agent) protocol agent cards following the official specification.
Activation Triggers:
Key Resources:
templates/schema.json - Complete JSON schema for validationtemplates/basic-agent-card.json - Simple agent card templatetemplates/multi-capability-agent-card.json - Agent with multiple skillstemplates/authenticated-agent-card.json - Agent with auth requirementstemplates/streaming-agent-card.json - Agent with streaming supportexamples/ - Real-world agent card examplesscripts/validate-agent-card.sh - Schema validation scriptscripts/generate-agent-card.sh - Interactive card generatorscripts/test-agent-card.sh - Format and structure testingCRITICAL: When generating any configuration files or code:
❌ NEVER hardcode actual API keys or secrets ❌ NEVER include real credentials in examples ❌ NEVER commit sensitive values to git
✅ ALWAYS use placeholders: your_service_key_here
✅ ALWAYS create .env.example with placeholders only
✅ ALWAYS add .env* to .gitignore (except .env.example)
✅ ALWAYS read from environment variables in code
✅ ALWAYS document where to obtain keys
Placeholder format: {service}_{env}_your_key_here
Basic Identity:
id - Unique identifier (URI or UUID)name - Human-readable display nameprotocolVersion - A2A protocol version (e.g., "0.3")serviceEndpoint - Base URL for agent's A2A serviceprovider - Organization information (name, contactEmail, url)Security:
securitySchemes - Authentication scheme definitionssecurity - Required auth combinationsCapabilities:
capabilities - Feature flags (streaming, pushNotifications)description - Detailed agent purpose explanationlogo - URL to logo imageversion - Agent implementation versionskills - Array of agent capabilities with schemasextensions - Extension support declarationsmetadata - Custom key-value pairsUse for: Simple agents with minimal configuration
Template: templates/basic-agent-card.json
Features:
Use for: Agents with multiple skills and capabilities
Template: templates/multi-capability-agent-card.json
Features:
Use for: Agents with complex authentication requirements
Template: templates/authenticated-agent-card.json
Features:
Use for: Agents supporting real-time updates
Template: templates/streaming-agent-card.json
Features:
API Key:
{
"type": "apiKey",
"name": "X-API-Key",
"in": "header"
}
Bearer Token:
{
"type": "http",
"scheme": "bearer"
}
OAuth 2.0:
{
"type": "oauth2",
"flows": {
"authorizationCode": {
"authorizationUrl": "https://provider.example/oauth/authorize",
"tokenUrl": "https://provider.example/oauth/token",
"scopes": {
"read": "Read access",
"write": "Write access"
}
}
}
}
Basic Auth:
{
"type": "http",
"scheme": "basic"
}
Choose template based on agent requirements:
# List available templates
ls templates/
# View template content
cat templates/basic-agent-card.json
Use interactive generator:
./scripts/generate-agent-card.sh
# Or specify template directly
./scripts/generate-agent-card.sh --template basic
Generator prompts for:
Validate against schema:
# Validate structure and required fields
./scripts/validate-agent-card.sh agent-card.json
# Test format and completeness
./scripts/test-agent-card.sh agent-card.json
Validation checks:
Host at standard location:
https://<base_url>/.well-known/agent.json
Or alternative:
https://<base_url>/.well-known/agent-card.json
Each skill in the agent card includes:
{
"name": "skill-identifier",
"description": "What the skill does",
"inputSchema": {
"type": "object",
"properties": {
"param1": {"type": "string"}
},
"required": ["param1"]
},
"outputSchema": {
"type": "object",
"properties": {
"result": {"type": "string"}
}
},
"inputModes": ["text/plain", "application/json"],
"outputModes": ["application/json"],
"tags": ["category", "feature"],
"examples": [
{
"input": {"param1": "example"},
"output": {"result": "example output"}
}
]
}
Purpose: Validate agent card against JSON schema Usage:
./scripts/validate-agent-card.sh <agent-card.json>
Checks:
Purpose: Interactive agent card generator Usage:
./scripts/generate-agent-card.sh [--template TEMPLATE]
Options:
--template basic|multi|authenticated|streaming--output FILE - Output file path--interactive - Prompt for all valuesPurpose: Test agent card format and structure Usage:
./scripts/test-agent-card.sh <agent-card.json>
Tests:
examples/calculator-agent.md - Simple math calculation agent
examples/translation-agent.md - Multi-language translation service
examples/data-analysis-agent.md - Complex data processing agent
Each example includes:
✓ Use standard well-known URI - /.well-known/agent.json
✓ Include comprehensive descriptions - Help with discovery
✓ Define clear input/output schemas - Enable validation
✓ Specify authentication requirements - Security first
✓ Version your agent cards - Track changes
✓ Test card accessibility - Ensure HTTP GET works
✓ Document all skills - Include examples
✓ Use placeholder credentials - Never hardcode secrets
Issue: Agent card not discovered
Fix: Verify /.well-known/agent.json is accessible via HTTP GET
Issue: Authentication failures
Fix: Check securitySchemes and security match implementation
Issue: Schema validation errors
Fix: Run validate-agent-card.sh to identify missing/invalid fields
Issue: Skills not recognized Fix: Ensure input/output schemas are valid JSON Schema format
A2A Protocol Specification: https://a2a-protocol.org/latest/specification/ Agent Card Concepts: https://agent2agent.info/docs/concepts/agentcard/ JSON Schema Reference: https://json-schema.org/
Supported A2A Protocol Version: 0.3+ Template Version: 1.0.0 Last Updated: 2025-12-20
まだレビューはありません。使ってみた感想をお寄せください。
概要と使いどころ
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
日本語の概要は準備中です。原文の説明を表示しています。
Guides the creation of agile user stories and Gherkin feature files. Use when the user wants to create a user story, write acceptance criteria, define Gherkin scenarios, or author BDD feature files. This should trigger for requests such as Create a user story; Write a user story; I need to write a user story. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。
Facilitates conversational discovery to create Architectural Decision Records (ADRs) for non-functional requirements using the ISO/IEC 25010:2023 quality model. Use when the user wants to document quality attributes, NFR decisions, security/performance/scalability architecture, or design systems with measurable quality criteria. This should trigger for requests such as Create ADR for Non-functional requirements; Document Non-functional requirements; Capture Non-functional requirements; Generate Non-functional requirements in an ADR. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。
Run a health check on an existing project: dependency audit, security scan, test runner detection, CI/CD evaluation, and missing configuration analysis. Maps the three execution gates (pre/in/post) from /10x-bootstrapper to an assessment framework for existing codebases. Reads optional context/foundation/stack-assessment.md from /10x-stack-assess to focus checks on identified gaps. Writes context/foundation/health-check.md with findings, prioritized fixes, and an agent-readiness verdict. Use when the user has an existing project and wants to verify its health before working with an agent. Trigger phrases: "health check", "check my project", "audit my project", "is my project healthy", "sprawdź projekt", "audyt projektu", "health-check", "project health". Use AFTER /10x-stack-assess (brownfield chain), BEFORE agent onboarding (m1-l4).
日本語の概要は準備中です。原文の説明を表示しています。
You MUST use this when building projects end-to-end. Orchestrates all 12 team roles — automatically switches between CTO, architect, PM, engineers, SRE, security, DBA, QA, and EM based on the current phase of work. Starts with brainstorming before any implementation.
日本語の概要は準備中です。原文の説明を表示しています。
Use when you need to add or configure Maven plugins in your pom.xml — including quality tools (enforcer, surefire, failsafe, jacoco, pitest, spotbugs, pmd), security scanning (OWASP), code formatting (Spotless), version management, container image build (Jib), build information tracking, and benchmarking (JMH) — through a consultative, modular step-by-step approach that only adds what you actually need. This should trigger for requests such as Add Maven plugins in pom.xml; Improve Maven plugins in pom.xml. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。