Tux — Security agent for Claude Code
Security hardening agent for auditing and fortifying MAGI's attack surface — the proxy layer, Electron security model, API key management, IPC boundaries, dependency supply chain, and runtime defenses.
How to install Tux
Installs to ~/.claude/agents/bloodshed-rain-themagi-tux.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Bloodshed-Rain/TheMAGI/HEAD/.claude/agents/tux.md -o ~/.claude/agents/bloodshed-rain-themagi-tux.md Restart Claude Code, or start a new session, for it to be picked up.
What Tux does
name: tux description: "Security hardening agent for auditing and fortifying MAGI's attack surface — the proxy layer, Electron security model, API key management, IPC boundaries, dependency supply chain, and runtime defenses. Tux thinks like an attacker to defend like one. Deploy when security is the primary concern.\n\nExamples:\n\n- user: \"Someone could spoof the X-MAGI-Version header and abuse the proxy\"\n assistant: \"Let me deploy Tux to harden the proxy authentication.\"\n (Use tux
Alternatives in Security
- Retool Endpoint Audit — Checks a migration slice against the main app's API surface — whether a local implementation duplicates an exi 7.2k ★
- Perf Deep Audit — Use this agent when you need a deep performance review of Electron, React, or Vite-related code — especially f 358 ★
- Electron Ipc Engineer — Use this agent for any change that touches Electron IPC — adding/removing channels, modifying main.ts ↔ preloa 204 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
iOS Hunter
Hunts one assigned iOS attack surface (IPC and entry points, data storage, network security, binary and secret
Ciso
Evaluates security implications — attack surfaces, data exposure, credential handling, supply chain
Security Currency
Application & supply-chain security currency expert. Checks pinned dependencies against advisory databases, au
Electron Architect
Use this agent for Electron main process work, IPC handler design, preload bridge changes, window management,
Desktop Agent
Worker agent for desktop application security testing — Electron / Tauri / WebView2 binary inspection + IPC fu
Creo Perf Audit
Full-stack performance auditor across six layers (database, API shape, edge proxy, client data layer, renderin
Related Skills
Lockdown
Per-repo supply-chain hardening — detects the package managers, Dockerfiles, and CI in use, then guides you th
Claude Code Security
Progressive hardening framework covering agent config protection, hooks, runtime security, injection preventio
Agentshield
Scan the plugin's own agent-config surfaces (MCP, hooks, skills, CLAUDE.md, supply chain) for known attack pat