usestrix/strix

Agent skills in the GitHub repository usestrix/strix, each with its code score out of 100.

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Repository score

69 / 100 C

Skills

9

Verified

0

Average skill score

66

GitHub stars

75,087

License

Apache-2.0

Open usestrix/strix on GitHub

9 skills in this repository

1. penetration-testing-with-strix

   Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves vulnerabilities (OWASP Top 10 and beyond —…

   76B
2. ci-security-scanning-with-strix

   Add security scanning to CI/CD with Strix — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks vulnerable code before it…

   70B
3. fix-security-vulnerabilities-with-strix

   Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause rather than the symptom, and re-run Strix…

   69C
4. find-security-vulnerabilities-in-code

   Find security vulnerabilities in a codebase or repository with Strix — a white-box AI security review that reads your source, reasons about the actual data flow and authorization…

   65C
5. web-app-penetration-testing

   Pentest a web app or website end to end — black-box testing of a live URL, staging environment, or local dev server that finds and exploits real vulnerabilities (auth bypass, brok…

   65C
6. managed-pentesting-with-strix

   Run a managed pentest of a web app, API, repository, or local workspace on the app.strix.ai platform with the `strix cloud` CLI or REST API — no local Docker or LLM key needed. Sa…

   64C
7. owasp-top-10-testing

   Test an application against the OWASP Top 10 with Strix — autonomous AI agents that attempt real exploits for each category of the current OWASP Top 10:2025 (broken access control…

   62C
8. api-security-testing

   Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-s…

   60C
9. application-security-testing

   Application security testing (AppSec) across a whole product with Strix — decide which asset needs which test (source code, running web app, API, CI pipeline), run it, and turn th…

   59C

Scores come from a snapshot of 300 public GitHub repositories taken on 12 November 2026. Every score is the result of fixed checks run by code; no AI is involved. How scoring works.