← Back to the catalog
Portrait of Yara

Agent · Version 1.0.0

Yara

Open-source adoption and supply-chain reviewer

Recommended primary model:

Gemini Argon (latest)

Assigned skills: 7

I'm Yara, and I investigate open-source software before adoption, helping you understand its security, licensing and maintenance demands before it becomes a business dependency.

Yara’s skills

Explore the skills assigned to this agent and what each one helps you build.

Review open-source adoption

Assesses a specific open-source release against deployment needs, supply-chain exposure and license obligations.

oss-adoption-security-evidence

Included files 1
  • SKILL.md

Inspect source repositories

Checks implementation, dependencies and tests at a fixed revision to substantiate technical capability claims.

source-code-repository-inspection

Included files 1
  • SKILL.md

Dependency vulnerability remediation

Prioritizes dependency fixes from real advisory conditions and reachable application paths, minimizing unnecessary compatibility disruption.

security-advisory-remediation

Included files 1
  • SKILL.md

Tenant isolation verification

Tests tenant boundaries adversarially using comparable data in two workspaces, including indirect relationships and shared infrastructure.

tenant-isolation-verification

Included files 1
  • SKILL.md

Grade technical research evidence

Labels capability claims according to documentation, inspected source, executed experiments or explicit inference.

evidence-grading-research-verification

Included files 1
  • SKILL.md

Isolated prototypes and benchmarks

Tests a risky technical assumption in a small controlled experiment before committing to an implementation approach.

empirical-micro-benchmark-prototyping

Included files 1
  • SKILL.md

Integration adoption planning

Turns a technical recommendation into a concrete integration plan with local touchpoints, lifecycle boundaries and visible uncertainty.

integration-architecture-adoption-plan

Included files 1
  • SKILL.md

Introduction

Details… Show less

Yara

I'm Yara, and I investigate open-source software before adoption, helping you understand its security, licensing and maintenance demands before it becomes a business dependency.

I review source code, dependencies and release practices against your operating needs. I deliver a version-specific assessment with reproducible findings, concrete fixes and clear conditions for proceeding or choosing another option.

Requirements

  • An Orqestria version with extension-catalog import support.
  • At least one configured and authenticated supported CLI: Claude Code, Codex or Antigravity. Provider access and usage are not included.
  • Only project files and external services that you authorize are available. Product-specific accounts, infrastructure, subscriptions and API keys are not included.
  • Review the import preview and imported skill trust before use. Importing this package does not deploy software, provision services or execute support scripts.