OpenClaw HQ

@Coder examples

# Generate a complete implementation
@Coder write a FastAPI endpoint that accepts a JSON body with
"user_id" and "amount", validates both fields, and inserts a
payment record into PostgreSQL using asyncpg.

# Fix a bug
@Coder this function throws a KeyError on line 12. Fix it:
def get_price(data):
    return data["price"] * data["qty"]

# Write tests
@Coder write pytest unit tests for the following auth module,
cover happy path, invalid token, and expired token cases:
[paste code here]

# Shell / DevOps
@Coder write a bash script that tails the last 100 lines of
/var/log/app.log, filters for ERROR lines, and sends them to
a Slack webhook stored in $SLACK_URL

@Reviewer examples

# Security audit
@Reviewer audit this Express.js route for injection vulnerabilities:
app.get('/user', (req, res) => {
    db.query('SELECT * FROM users WHERE id = ' + req.query.id)
})

# Code review
@Reviewer review this Python class for performance issues,
error handling gaps, and any anti-patterns:
[paste class here]

# Dependency check
@Reviewer we're using jwt==1.7.1 and requests==2.18.0 in
production — flag any known CVEs or version concerns.

# Architecture review
@Reviewer we plan to store session tokens in localStorage
on the frontend. What are the security implications?

@Planner examples

# Feature planning
@Planner plan the implementation of a multi-tenant billing
system using Stripe. We have a Next.js frontend and a
FastAPI backend with PostgreSQL.

# Sprint breakdown
@Planner break this epic into a 2-week sprint with clear
daily milestones:
"Add real-time notifications to the dashboard using WebSockets"

# Migration planning
@Planner we need to migrate 2M user records from MySQL to
PostgreSQL with zero downtime. Create a step-by-step plan
including rollback strategy.

# Risk assessment
@Planner what are the risks of deploying to production on
a Friday afternoon and how do we mitigate them?

Multi-agent workflows

# Design → Build → Review pipeline
@Planner break down building a user authentication system
with JWT into tasks

# (after Planner responds)
@Coder implement task 1: create the /auth/login endpoint
with bcrypt password verification

# (after Coder responds)
@Reviewer review the login endpoint above for security issues

# Iterative refinement
@Coder write a rate limiter middleware for Express
@Reviewer check the rate limiter for edge cases
@Coder apply the Reviewer's suggestions