SkillHub

Skills

usestrix

8 skills in one repo.

usestrix on GitHub

strix Project

The open-source AI pentesting tool: autonomous AI hackers that find and fix your app's vulnerabilities.

74,490 stars on GitHub, Nov 9, 2026 · 8 skills · 1 bundle

  1. Strix

    Bundle of 8 skills
    Use it when:
    You want to find and fix security vulnerabilities in your own app, API or code with autonomous AI pentesting.
    It does:
    Runs Strix agents that exploit a target and validate each finding with a PoC, then helps you patch and re-test.

    penetration-testing-with-strix, application-security-testing, find-security-vulnerabilities-in-code, web-app-penetration-testing, api-security-testing, owasp-top-10-testing, fix-security-vulnerabilities-with-strix, ci-security-scanning-with-strix

    Age
    3 months
    Stars
    74.5K
    #27
    Total Downloads
    20K
    top 29%
    Weekly Downloads
    1.6K
    top 25%

  2. penetration-testing-with-strix

    Part of Strix
    Use it when:
    You want to pentest or security-scan an app, API, repo or URL and get exploit-proven findings.
    It does:
    Runs autonomous AI pentesting agents that exploit the target in a sandbox and validate each finding with a proof-of-concept.
    type:tooleffect:remoteneeds:clineeds:accountby:officialsecuritytestingstack:strix
    Age
    3 months
    Stars
    74.5K
    #27
    Total Downloads
    20K
    top 29%
    Weekly Downloads
    1.6K
    top 25%

  3. fix-security-vulnerabilities-with-strix

    Part of Strix
    Use it when:
    A Strix scan has reported findings and you want to remediate them.
    It does:
    Orders findings by severity, fixes the root cause with framework defenses, then re-scans to confirm the exploit is gone.
    type:workfloweffect:localneeds:clineeds:accountby:officialsecuritydebuggingstack:strix
    Age
    3 months
    Stars
    74.5K
    #27
    Total Downloads
    18.8K
    top 29%
    Weekly Downloads
    1.5K
    top 26%

  4. ci-security-scanning-with-strix

    Part of Strix
    Use it when:
    You want security scanning as a pre-merge gate in CI/CD.
    It does:
    Adds a diff-scoped Strix scan to the pipeline, or connects the managed PR-review app, that fails the build on validated findings.
    type:setupeffect:localneeds:clineeds:accountby:officialsecuritycistack:strixstack:github
    Age
    3 months
    Stars
    74.5K
    #27
    Total Downloads
    18.4K
    top 30%
    Weekly Downloads
    1.4K
    top 27%

  5. web-app-penetration-testing

    Part of Strix
    Use it when:
    You want a black-box (or source-assisted) pentest of a running web app or staging site.
    It does:
    Runs Strix agents against the URL with your test credentials and scope, exploiting and proving each finding.
    type:tooleffect:remoteneeds:clineeds:accountby:officialsecuritytestingstack:strix
    Age
    2 months
    Stars
    74.5K
    #27
    Total Downloads
    16.1K
    top 32%
    Weekly Downloads
    1.5K
    top 25%

  6. api-security-testing

    Part of Strix
    Use it when:
    You want to security-test an API against the OWASP API Security Top 10.
    It does:
    Feeds Strix the OpenAPI/GraphQL/Postman schema and tokens, then exploits authorization, injection and resource-consumption flaws.
    type:tooleffect:remoteneeds:clineeds:accountby:officialsecuritytestingbackendstack:strix
    Age
    2 months
    Stars
    74.5K
    #27
    Total Downloads
    16K
    top 32%
    Weekly Downloads
    1.5K
    top 25%

  7. owasp-top-10-testing

    Part of Strix
    Use it when:
    You need an assessment mapped to OWASP Top 10 categories.
    It does:
    Runs Strix against each OWASP Top 10:2025 category and maps every proven finding back to its category.
    type:tooleffect:remoteneeds:clineeds:accountby:officialsecuritytestingstack:strix
    Age
    2 months
    Stars
    74.5K
    #27
    Total Downloads
    16K
    top 32%
    Weekly Downloads
    1.5K
    top 25%

  8. find-security-vulnerabilities-in-code

    Part of Strix
    Use it when:
    You want a security review of a repo, working tree or PR that reports proven issues, not scanner noise.
    It does:
    Reads the source to model routes, sinks and authorization, then exploits what it finds in a live sandbox.
    type:tooleffect:localneeds:clineeds:accountby:officialsecuritycode-reviewtestingstack:strix
    Age
    2 months
    Stars
    74.5K
    #27
    Total Downloads
    15.9K
    top 32%
    Weekly Downloads
    1.5K
    top 25%

  9. application-security-testing

    Only works as part of Strix
    Use it when:
    You want an application-security review across a whole product but don't yet know which test you need.
    It does:
    Maps each asset (code, web app, API, CI) to the right Strix skill, sequences the runs, and merges findings into one ranked plan.
    type:routereffect:noneneeds:clineeds:accountby:officialsecuritytestingstack:strix
    Age
    2 months
    Stars
    74.5K
    #27
    Total Downloads
    15.6K
    top 33%
    Weekly Downloads
    1.5K
    top 27%