Find Security Vulnerabilities in Code
Find security vulnerabilities in a codebase or repository with Strix : a white-box AI security review.
Works in any agent
2 static scans, 0 counted findings.
Recorded for this package revision; Edge checks the exact bundle again when your agent loads it.
What this skill does for you
Find security vulnerabilities in a codebase or repository with Strix : a white-box AI security review that reads your source, reasons about the actual data flow and authorization model, then exploits what it finds in a live sandbox so every reported issue has a working proof-of-concept instead of a noisy static-analysis alert. Covers injection, XSS, SSRF, broken access control and IDOR, insecure deserialization, secrets in code, unsafe dependencies, and business-logic flaws. Use when the user asks to security-scan, security-review, or audit their code, repo, or pull request for vulnerabilities.
Quoted from the skill description in the pinned sourceUse it with Edge
Set up Edge for me: read getedge.cc/SKILL.md and follow it. Then use Edge to load the find-security-vulnerabilities-in-code skill from usestrix/strix.
Paste it into Claude, ChatGPT, Codex or Cursor.
Or read the skill source first.
Security evidence
| Scanner | Date | Result | Findings |
|---|---|---|---|
| Edge static checks | 2026-09-29 | Pass | 0 |
| Edge committed-secret checks | 2026-09-29 | Pass | 0 |
Static scans check the code, not how well the skill works.
Scanner scope, raw findings and mirrored provider records
Edge static checks (Edge-run): edge-static/1.0.0. Scope: Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence. Revision: 0c702723aa4adf2d388b7218510a6207676bb2e0. Raw findings: not supplied. Counted findings: .
Edge committed-secret checks (Edge-run): edge-secrets/1.0.0. Scope: Credentials committed in the skill's files (values never shown). Revision: 0c702723aa4adf2d388b7218510a6207676bb2e0. Raw findings: not supplied. Counted findings: .
Socket (skills.sh mirror): Version unavailable. Scope: Not supplied by the mirrored record. Revision: not supplied. Raw findings: not supplied. Counted findings: Not supplied.
Snyk (skills.sh mirror): Version unavailable. Scope: Not supplied by the mirrored record. Revision: not supplied. Raw findings: not supplied. Counted findings: Not supplied.
Source and licence
- Repository
- https://github.com/usestrix/strix
- Pinned skill file
- View source at revision
- Revision
- 0c702723aa4adf2d388b7218510a6207676bb2e0
- Package hash
- sha256:ebb8c475452dc208e55b6148a8c13906c84d930abe4ff591f58c0d7b4f660c6a
- Licence
- Apache-2.0
Files in the scanned package
| File | Size |
|---|---|
| SKILL.md | 4.3 KB |
Try Find Security Vulnerabilities in Code in your agent.
Find security vulnerabilities in a codebase or repository with Strix : a white-box AI security review.