Tux — Security agent for Claude Code
Security hardening agent for auditing and fortifying MAGI's attack surface — the proxy layer, Electron security model, API key management, IPC boundaries, dependency supply chain, and runtime defenses.
How to install Tux
Installs to ~/.claude/agents/bloodshed-rain-themagi-tux.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Bloodshed-Rain/TheMAGI/HEAD/.claude/agents/tux.md -o ~/.claude/agents/bloodshed-rain-themagi-tux.md Restart Claude Code, or start a new session, for it to be picked up.
What Tux does
name: tux description: "Security hardening agent for auditing and fortifying MAGI's attack surface — the proxy layer, Electron security model, API key management, IPC boundaries, dependency supply chain, and runtime defenses. Tux thinks like an attacker to defend like one. Deploy when security is the primary concern.\n\nExamples:\n\n- user: \"Someone could spoof the X-MAGI-Version header and abuse the proxy\"\n assistant: \"Let me deploy Tux to harden the proxy authentication.\"\n (Use tux
Alternatives in Security
- Wcag Audit Patterns — Comprehensive guide to auditing web content against WCAG 2.2 guidelines with actionable remediation 31.9k ★
- Claude Agents By Ian Nuttall — Ready-to-use subagents for code refactoring, frontend design, security auditing, project planning, content wri 2k ★
- Perf Deep Audit — Use this agent when you need a deep performance review of Electron, React, or Vite-related code — especially f 358 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Deep Security Auditor
Adversarial red-team and security compliance specialist. Inspects ASTs for prompt injections, credential leaks
Security Currency
Application & supply-chain security currency expert. Checks pinned dependencies against advisory databases, au
Creo Perf Audit
Full-stack performance auditor across six layers (database, API shape, edge proxy, client data layer, renderin
Electron Ipc Engineer
Use this agent for any change that touches Electron IPC — adding/removing channels, modifying main.ts ↔ preloa
Electron Architect
Use this agent for Electron main process work, IPC handler design, preload bridge changes, window management,
Desktop Agent
Worker agent for desktop application security testing — Electron / Tauri / WebView2 binary inspection + IPC fu
Related Skills
Client Security Review
Review browser, SPA, Electron, and mobile trust boundaries: DOM, origins, IPC, navigation, storage, and server
Lockdown
Per-repo supply-chain hardening — detects the package managers, Dockerfiles, and CI in use, then guides you th
Claude Code Security
Progressive hardening framework covering agent config protection, hooks, runtime security, injection preventio