Find proven vulnerabilities in your web app.
What it does
Tests applications and code for exploitable vulnerabilities and returns findings backed by working proofs of concept.
When to use it
Use when the user requests penetration testing, security scanning, security auditing, or vulnerability discovery for an application, API, website, or repository.
How to use it
Give it an authorized target to test; it returns a severity-ranked summary of validated vulnerabilities with proof-of-concept evidence.
What you provide
- a URL, domain, IP, or code path
Uses
What you need · 3
The documented CLI workflows use the strix binary for both self-hosted and managed scans; the skill provides installation instructions if it is missing.
The self-hosted authentication path uses an LLM provider API key from the environment together with STRIX_LLM model configuration; the managed path does not need this key.
Access · 2
This skill
Strix
Starts cloud penetration tests
Registers targets with Strix
https://strix.ai/install
Installs Strix from a remote script