Penetration Testing with Strix

Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix : autonomous AI...

Copy setup link

Works in any agent

usestrix/strixpinned 0c70272

✓ Security state: reviewed

2 static scans, 0 counted findings.

Recorded for this package revision; Edge checks the exact bundle again when your agent loads it.

SKILL.md1 file · 9.6 KB

From usestrix’s public repository. Edge did not write or edit this skill.

What this skill does for you

Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix : autonomous AI penetration testing that exploits and proves vulnerabilities (OWASP Top 10 and beyond : injection, XSS, SSRF, auth/access-control flaws, IDOR, business logic) instead of just flagging them. Runs self-hosted with the open-source CLI or via the managed app.strix.ai cloud, and returns validated findings with proof-of-concept exploits (Markdown, JSON, CSV, SARIF). Use when the user asks to pentest, hack, security-scan, security-audit, or find vulnerabilities in an app, API, website, or repo.

Quoted from the skill description in the pinned source

Use it with Edge

Set up Edge for me: read getedge.cc/SKILL.md and follow it. Then use Edge to load the penetration-testing-with-strix skill from usestrix/strix.

Paste it into Claude, ChatGPT, Codex or Cursor.

Or read the skill source first.

Security evidence

Security state at 2026-10-15: reviewed. State definitions. This records static evidence for this revision; live load eligibility is checked again.

2 static scans, 0 counted findings. The listed scanners recorded the results shown for this package revision.

Scanner	Date	Result	Findings
Edge static checks	2026-09-29	Pass	0
Edge committed-secret checks	2026-09-29	Pass	0

Static scans check the code, not how well the skill works.

Scanner scope, raw findings and mirrored provider records

Edge static checks (Edge-run): edge-static/1.0.0. Scope: Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence. Revision: 0c702723aa4adf2d388b7218510a6207676bb2e0. Raw findings: not supplied. Counted findings: .

Edge committed-secret checks (Edge-run): edge-secrets/1.0.0. Scope: Credentials committed in the skill's files (values never shown). Revision: 0c702723aa4adf2d388b7218510a6207676bb2e0. Raw findings: not supplied. Counted findings: .

Socket (skills.sh mirror): Version unavailable. Scope: Not supplied by the mirrored record. Revision: not supplied. Raw findings: not supplied. Counted findings: Not supplied.

Snyk (skills.sh mirror): Version unavailable. Scope: Not supplied by the mirrored record. Revision: not supplied. Raw findings: not supplied. Counted findings: Not supplied.

Source and licence

Repository: https://github.com/usestrix/strix
Pinned skill file: View source at revision
Revision: 0c702723aa4adf2d388b7218510a6207676bb2e0
Package hash: sha256:6dc122786aeae359b08cbcbbc5d028afde3e2bc75399f13938d19f898d0ee829
Licence: Apache-2.0

File	Size
SKILL.md	9.6 KB

Try Penetration Testing with Strix in your agent.