Add Kiro agent subagent invocation validation rules #604
Description
Summary
Research revealed Kiro has a working subagent system. Agents in .kiro/agents/*.json can be invoked as subagents by the primary agent. This creates new validation opportunities.
Context
From GitHub issues on kirodotdev/kiro:
- #5743: Subagent spawning broke in v1.26.0 ("unable to find agent with name")
- #4262: Multi-agent orchestration feature request (sync/async subagents)
- #5449: Subagent permission inheritance request
- #5071: Subagent tool approval improvements
New rules to consider
| Rule | What | Confidence |
|---|---|---|
| KR-AG-006 | Agent references non-existent subagent in prompt (mentions agent name not in .kiro/agents/) | MEDIUM |
| KR-AG-007 | Agent has broader tools than a subagent it invokes (permission escalation risk) | MEDIUM |
| KR-AG-008 | Agent prompt instructs parallel subagent spawning (not supported - sequential only) | LOW |
Depends on
- Add Kiro skill, hook, spec, and powers validation rules #593 (Expand Kiro rules) - these build on the base agent validation rules
Acceptance criteria
- Evaluate feasibility of cross-agent reference validation
- Add rules to rules.json if confidence is HIGH enough
- Tests for subagent validation patterns