Owasp Top 10 Testing

Test an application against the OWASP Top 10 with Strix : autonomous AI agents.

Copy setup link

Works in any agent

usestrix/strixpinned 0c70272

✓ Security state: reviewed

2 static scans, 0 counted findings.

Recorded for this package revision; Edge checks the exact bundle again when your agent loads it.

SKILL.md1 file · 6.1 KB

From usestrix’s public repository. Edge did not write or edit this skill.

What this skill does for you

Test an application against the OWASP Top 10 with Strix : autonomous AI agents that attempt real exploits for each category of the current OWASP Top 10:2025 (broken access control including SSRF, security misconfiguration, software supply chain failures, cryptographic failures, injection, insecure design, authentication failures, integrity failures, logging and alerting failures, mishandling of exceptional conditions) and report only what they could actually prove, mapped back to the category with a proof-of-concept. Also covers the OWASP API Security Top 10 (2023). Use when the user asks for an OWASP Top 10 assessment, OWASP compliance testing, or a security review mapped to OWASP categories.

Quoted from the skill description in the pinned source

Use it with Edge

Set up Edge for me: read getedge.cc/SKILL.md and follow it. Then use Edge to load the owasp-top-10-testing skill from usestrix/strix.

Paste it into Claude, ChatGPT, Codex or Cursor.

Or read the skill source first.

Security evidence

Security state at 2026-10-15: reviewed. State definitions. This records static evidence for this revision; live load eligibility is checked again.

2 static scans, 0 counted findings. The listed scanners recorded the results shown for this package revision.

Scanner	Date	Result	Findings
Edge static checks	2026-09-29	Pass	0
Edge committed-secret checks	2026-09-29	Pass	0

Static scans check the code, not how well the skill works.

Scanner scope, raw findings and mirrored provider records

Edge static checks (Edge-run): edge-static/1.0.0. Scope: Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence. Revision: 0c702723aa4adf2d388b7218510a6207676bb2e0. Raw findings: not supplied. Counted findings: .

Edge committed-secret checks (Edge-run): edge-secrets/1.0.0. Scope: Credentials committed in the skill's files (values never shown). Revision: 0c702723aa4adf2d388b7218510a6207676bb2e0. Raw findings: not supplied. Counted findings: .

Socket (skills.sh mirror): Version unavailable. Scope: Not supplied by the mirrored record. Revision: not supplied. Raw findings: not supplied. Counted findings: Not supplied.

Snyk (skills.sh mirror): Version unavailable. Scope: Not supplied by the mirrored record. Revision: not supplied. Raw findings: not supplied. Counted findings: Not supplied.

Source and licence

Repository: https://github.com/usestrix/strix
Pinned skill file: View source at revision
Revision: 0c702723aa4adf2d388b7218510a6207676bb2e0
Package hash: sha256:970085f815116e237446560fd988f618b38f50628f7db41ffb8a961a00ced537
Licence: Apache-2.0

File	Size
SKILL.md	6.1 KB

Try Owasp Top 10 Testing in your agent.