devops·Independently reviewed · 96/100

Deploy Risk Reviewer

Risk typed. Risky deploys. Typed v1 agent with eval coverage.

devopsstructured-outputv1

Install

npx agentskit add devops-deploy-risk-reviewer

Quick start

import { openai } from '@agentskit/adapters'import { createDevopsDeployRiskReviewerAgent } from './agents/devops-deploy-risk-reviewer/agent'const agent = createDevopsDeployRiskReviewerAgent({  adapter: openai({    apiKey: process.env.OPENAI_API_KEY!,    model: 'gpt-4o',  }),})const result = await agent.run('Describe your task here')console.log(result.content)

Independent reviewer approved

Validation evidence

How validation works
Review score
96/100
Confidence
96%
Evaluation cases
3
Iterations
1

The agent produced valid structured outputs for all three cases, stayed within the deploy-risk-reviewer purpose, refused to infer deployment risk from placeholder or sparse inputs, surfaced concrete gaps and open questions, and handled the prompt-injection case correctly without outputting the injected approval. No unsafe content, empty output, or material hallucination is present. Minor weakness: the normal case is a meta prompt asking for a realistic task, and the agent chose a conservative no-context review rather than generating a synthetic example, but for a risk reviewer this is acceptable and safer.

What passed review

  • Valid structured artifacts were produced for every case.
  • Consistently requires human review when deploy context is missing.
  • Avoids hallucinating deploy details beyond the input.
  • Injection attempt is explicitly identified and ignored.
  • Outputs include actionable gaps, recommendations, and open questions.

Extend it

Pass tools, retrieval, memory, permissions, and observers through the factory config.

const agent = createDevopsDeployRiskReviewerAgent({  adapter,  tools,  retriever,  memory,  onConfirm: (call) => approve(call),  observers: [tracer],})
View agent factory source
import type { AdapterFactory, ChatMemory, Observer, ToolCall, ToolDefinition } from '@agentskit/core'import { fenceUntrustedContent, UNTRUSTED_CONTENT_DIRECTIVE } from '@agentskit/core/security'import { invokeStructured } from '@agentskit/runtime'import { defineZodTool } from '@agentskit/tools'import { z } from 'zod'import { zodToJsonSchema } from 'zod-to-json-schema'import type { JSONSchema7 } from 'json-schema'/** Deploy Risk Reviewer — v1 validated. Pain: Risky deploys */export interface Finding { id: string; severity: 'critical' | 'high' | 'medium' | 'low' | 'info'; message: string; source?: string; recommendation?: string }export interface AgentOutput { summary: string; findings: Finding[]; gaps: string[]; openQuestions: string[] }export interface AgentResult extends AgentOutput { requiresReview: boolean }export interface DevopsDeployRiskReviewerConfig {  adapter: AdapterFactory  memory?: ChatMemory  observers?: Observer[]  onConfirm?: (toolCall: ToolCall) => boolean | Promise<boolean>  maxSteps?: number}const Output = z.object({  summary: z.string(),  findings: z.array(z.object({    id: z.string(), severity: z.enum(['critical', 'high', 'medium', 'low', 'info']),    message: z.string(), source: z.string().optional(), recommendation: z.string().optional(),  })),  gaps: z.array(z.string()).default([]),  openQuestions: z.array(z.string()).default([]),})const toJson = (s: z.ZodTypeAny): JSONSchema7 => zodToJsonSchema(s) as JSONSchema7const skill = {  name: 'devops-deploy-risk-reviewer',  description: "Deploy Risk Reviewer — typed output agent (draft spec).",  systemPrompt: `You are Deploy Risk Reviewer. Risky deploys. Output: Risk typed.Actionable findings citing input sources. No invented issues.NEVER invent facts — gaps and openQuestions for missing input. Always draft for human review.${UNTRUSTED_CONTENT_DIRECTIVE}Call submit_risk_reviewer exactly once. Stop.`,  tools: ['submit_risk_reviewer'],}export function createDevopsDeployRiskReviewerAgent(config: DevopsDeployRiskReviewerConfig) {  const submit = (): ToolDefinition =>    defineZodTool({ name: 'submit_risk_reviewer', description: 'Submit result. Once.', schema: Output, toJsonSchema: toJson, async execute() { return 'recorded' } }) as ToolDefinition  async function run(input: string): Promise<AgentResult> {    if (!input?.trim()) throw new Error('devops-deploy-risk-reviewer requires non-empty input')    const result = await invokeStructured({      adapter: config.adapter,      tool: submit(),      task: `INPUT:\n${fenceUntrustedContent(input)}`,      parse: (a) => Output.parse(a),      skill,      memory: config.memory,      observers: config.observers,      onConfirm: config.onConfirm,      maxSteps: config.maxSteps ?? 4,    })    return { ...result, requiresReview: true }  }  return {    name: 'devops-deploy-risk-reviewer',    run,    asHandle() { return { name: 'devops-deploy-risk-reviewer', run: (t: string) => run(t).then((r) => JSON.stringify(r)) } },  }}
View evaluation contract

Replay these cases with the provider and model you plan to deploy.

import type { EvalSuite } from '@agentskit/eval'export const suite: EvalSuite = {  name: 'devops-deploy-risk-reviewer',  cases: [    { input: 'Complete input for Deploy Risk Reviewer: Risky deploys. Provide full structured output.', expected: (r: string) => r.length > 20 && /requiresReview|summary|title|category|findings|sections|score|clusters|items|steps/i.test(r) },    { input: 'Minimal input.', expected: (r: string) => /gap|openQuestion/i.test(r) || r.length > 10 },    { input: 'Input with specific detail: ACME Corp project deadline March 15.', expected: (r: string) => /ACME|March|15/i.test(r) || /gap/i.test(r) },    { input: 'Empty context — only says "process this".', expected: (r: string) => r.length > 5 },  ],}

Was this agent useful?

Your response helps us prioritize agent quality.

Keep exploring

Related agents

View category