cyrus-setup-prerequisites

What the source does

• FilesystemNone observedNo reads or writes in the source
• NetworkNone observedNo outbound calls in the source
• ShellNone observedNo commands run in the source
• DependenciesPinnedNothing floats
• SecretsNone foundNo keys in source

Five audit layers

Gates applied: no behavioural pass.

.claude/skills/cyrus-setup

.claude/skills/cyrus-setup-claude-auth

.claude/skills/cyrus-setup-endpoint

.claude/skills/cyrus-setup-github

.claude/skills/cyrus-setup-gitlab

Audit 0.4.1 · source sha 8ac3bf1a38f4 · 26 Oct 2026Report an issue or request a re-scan

• Publisherceedaragents GitHub organizationOwner of the repository this skill is read from
• Source folderceedaragents/cyrus/skills/cyrus-setup-prerequisitesThe exact folder we audited
• LicenceApache-2.0As the repository states it
• Commit pinned for this verdict8ac3bf1a38f4A new audit runs when the source changes
• Repository statusNot archivedPushed today
• Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

Its description: Check and install prerequisites for Cyrus — Node.js, jq, gh CLI, and the cyrus-ai npm package.

---
name: cyrus-setup-prerequisites
description: Check and install prerequisites for Cyrus — Node.js, jq, gh CLI, and the cyrus-ai npm package.
---

**CRITICAL: Never use `Read`, `Edit`, or `Write` tools on `~/.cyrus/.env` or any file inside `~/.cyrus/`. Use only `Bash` commands (`grep`, `printf >>`, etc.) to interact with env files — secrets must never be read into the conversation context.**

# Setup Prerequisites

Checks system prerequisites and installs `cyrus-ai`.

## Step 1: Detect Package Manager

If the user hasn't already specified their preferred package manager, ask:

> **Which package manager do you prefer?** npm, pnpm, bun, or yarn?

Store the answer for use in this and subsequent skills.

## Step 2: Check System Dependencies

Run the following checks and report results:

```bash
# Node.js >= 18
node --version

# jq (required for Claude Code parsing)
jq --version

# GitHub CLI (required for GitHub integration)
gh --version
```

For each missing dependency, provide the install command:

| Dependency | macOS | Linux/Ubuntu |
|-----------|-------|--------------|
| Node.js | `brew install node` | `curl -fsSL https://deb.nodesource.com/setup_22.x \| sudo -E bash - && sudo apt install -y nodejs` |
| jq | `brew install jq` | `sudo apt install -y jq` |
| gh | `brew install gh` | See https://github.com/cli/cli/blob/trunk/docs/install_linux.md |

If all dependencies are present, print a checkmark for each and continue.

If any are missing, offer to install them (detect OS via `uname`). Wait for user confirmation before installing.

## Step 3: Check for agent-browser (Optional)

If the user selected any integration surface (Linear, GitHub, Slack), check for `agent-browser`:

```bash
which agent-browser
```

**If installed**, ensure it's up to date:

```bash
npm update -g agent-browser
```

**If not found**, inform the user:

> `agent-browser` is optional but enables automated app creation for Linear/GitHub/Slack. Without it, you'll be guided through manual setup steps instead.
>
> Install with: `npm install -g agent-browser`

Do NOT block on this — it's optional. Note whether it's available for downstream skills.

## Step 4: Install cyrus-ai

Check if already installed:

```bash
which cyrus
```

If not found, install using the user's preferred package manager:

```bash
# npm
npm install -g cyrus-ai

# pnpm
pnpm install -g cyrus-ai

# bun
bun install -g cyrus-ai

# yarn
yarn global add cyrus-ai
```

Verify installation:

```bash
cyrus --version
```

## Step 5: Ensure ~/.cyrus directory exists

```bash
mkdir -p ~/.cyrus
```

If `~/.cyrus/.env` already exists, note it and inform the user that existing values will be preserved.

## Completion

Print a summary:

```
Prerequisites:
  ✓ Node.js v22.x
  ✓ jq 1.7
  ✓ gh 2.x
  ✓ cyrus-ai installed
  ✓ agent-browser available (or: ⚠ not installed — manual setup mode)
```

Excerpt, first 2,863 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

1. 2026-10-26
   !CAUTION B 89 / 100

   first audit · source 8ac3bf1a38f4

Questions about cyrus-setup-prerequisites

• github.com/ceedaragents/cyrus/tree/main/skills/cyrus-setup-prere — the audited source at commit 8ac3bf1a38f4 and every finding aboveObserved · 26 Oct 2026

Spotted something wrong? Report a correction · Methodology