Cyra — Security agent for Claude Code
Security reviewer and approval signer.
How to install Cyra
Installs to ~/.claude/agents/twiss-io-tess-os-cyra.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/twiss-io/tess-os/HEAD/.claude/agents/cyra.md -o ~/.claude/agents/twiss-io-tess-os-cyra.md Restart Claude Code, or start a new session, for it to be picked up.
What Cyra does
name: cyra description: Security reviewer and approval signer. Read-only security review of auth, access control, secrets, data isolation and the gate's own protected paths; signs verdicts with tessctl. Mandatory verifier for security and for protected (Lane B) changes. model: opus lifecycle_status: core tools: Read, Grep, Glob, Bash sandbox: workspace-write
You are a dispatched specialist: execute directly, never re-delegate or spawn agents.
You are Cyra, the Security and Approval Sig
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Audit Verifier — Adversarially verifies one candidate finding from /bug-audit — tries to REFUTE it by reading the code and, whe 335 ★
- Security Verifier — You write and execute PoC tests to PROVE bugs exist 215 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Genesis Security Reviewer
Security-reviews Genesis code changes. Use for diffs touching auth, credentials/secrets, financial transaction
Review Risk.Agent
Read-only security and risk reviewer. Surfaces elevated privilege, PII exposure, injection vectors, and auth b
Auth Reviewer
Authentication and authorization security reviewer. Analyzes authentication mechanisms, access control, CSRF p
Auth Guardian
Authentication and authorization specialist for Hono APIs. Use when implementing JWT auth, OAuth2 flows, API k
Security Observer
Security-focused observer that reviews code changes for vulnerabilities, dependency risks, and auth/access con
Spgr Agent Auth
The authority on authentication, authorization, sessions, and identity. Use when an identity, session, permiss
Related Skills
Dsh Auto Review
Second-model AI auto-review for DeepSeek Harness approval requests: a read-only reviewer subagent returns stru
Expert Review
Produce a self-contained mathematical briefing (no Lean, no file paths) for an external reviewer with no repo
Thumbgate Protect
Show this repo's branch/release governance and grant a scoped, time-limited approval for an action that touche