A multi-reviewer code-review process for examining software from several perspectives, especially architecture, security, and risks from AI-assisted development. It can perform a further review when a deeper examination is needed.

Use it to review a branch, assess architecture and security tradeoffs, look for AI-development failure modes, and perform an iterative re-review.

It helps expose design flaws, security issues, and blind spots that a single review may miss. It is intended for complex reviews rather than simple fixes.

hydra — Skill for Claude Code and Codex by opencue: A multi-reviewer code-review process for examining software from several…

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add skills/opencue/cuecards/hydra

Any agent

npx skills add opencue/cuecards --skill hydra

Clone the repo

git clone --depth 1 https://github.com/opencue/cuecards

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/opencue/cuecards/hydra.svg)](https://agentmods.dev/skills/opencue/cuecards/hydra)

Your own site

<a href="https://agentmods.dev/skills/opencue/cuecards/hydra"><img src="https://agentmods.dev/badge/skills/opencue/cuecards/hydra.svg" alt="Measured on agentmods" height="20"></a>

Per session 41 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 12,554 The whole file, excluding the scripts and references it only reads on demand.

Security scan B 2 findings. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00041	$0.12554
Opus 5	$0.00020	$0.06277
Sonnet 5	$0.00008	$0.02511
Haiku 4.5	$0.00004	$0.01255

Measured yesterday against content hash aaf7cd7f9dbd, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

hydra scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

The scan reads SKILL.md. This mod also ships 22 executable files (.claude/hooks/check-codex-freshness.sh, bench/__init__.py, bench/cases/01-axios-header-injection/workspace/src/interceptors/auth.ts, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootlowPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

HYDRA_TMP=$(mktemp -d "${TMPDIR:-/tmp}/hydra-XXXXXX") && chmod 700 "$HYDRA_TMP" && echo "$HYDRA_TMP"

Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.

Recursive force deletemediumDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

rm -rf "$HYDRA_TMP" 2>/dev/null

Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.

.agents/skills/hydra/SKILL.md · 947 lines

How it starts

The opening of the file, as written. The whole thing — 947 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Hydra

Example invocation

Run Hydra for a deep security and architecture review of this branch.

Four advisors analyze your code from different angles by default (standard mode) -- including Echo, which reviews AI-assisted-development failure modes. Escalate to deep mode for the full council: six advisors, three cross-examining reviewers, and a chairman synthesizing the final verdict.

Standard mode runs 4 advisors + chairman on Opus (~~$0.35-0.65). Deep mode adds 2 more advisors (including 2 Codex), 3 reviewers, and cross-model diversity (~~$1.50-2.50).

Reference files in references/ define all prompts and protocols -- read them at the relevant step.

Modes

Mode	CLI	Advisors	Reviewers	Chairman	Total	Est. Cost
standard	(default)	4 (Cassandra + Mies+ + Sentinel + Echo)	0	1 Opus	5	~$0.35-0.65
deep	`--mode deep`	6 (4 Opus + 2 Codex)	3 (all Opus)	1 Opus	10	~$1.50-2.50

Modifiers (combinable):

--no-codex -- the deep-mode Codex advisors (Mies+, Sentinel) run on Opus instead.
--no-review -- Skip peer review phase. Only meaningful with deep (reduces to 7 agents, ~$1.00).

Minimum thresholds -- formula: ceil(N * 0.6), min 2:

Mode	Min Advisors	Min Reviewers
standard	3 of 4	--
deep	4 of 6	2 of 3 (if reviewers active)

Read the full file on GitHub · 947 lines

Files

What ships with it

60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

yesterday First seen · 947 lines · 41 tokens per session scan B aaf7cd7f9dbd

Subscribe to this mod's changes

hydra is a skill published in the GitHub repository opencue/cuecards (5 stars, last pushed yesterday), licensed MIT. It adds 41 tokens to every session and 12,554 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 2 findings (asks for root, recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Code review Security ai-agents ai-coding anthropic architecture claude claude-code cli multi-perspective

design-patterns

Rust design patterns for RTK. Newtype, Builder, RAII, Trait Objects, State Machine. Applied to CLI filter modules. Use when designing new modules or refactoring existing ones.

rtk-ai/rtk · 42 tokens

codebase-onboarding

Use when you land in an unfamiliar or inherited codebase and must get productive fast: a breadth-first map of entry points, request flow, module ownership, hidden side effects (cron, webhooks, workers) and churn hotspots, committed as CODEBASE-MAP.md. NOT a deep audit of one module (that is analyze) or chasing one…

ericrisco/rsc-harness · 83 tokens

hydra