mirror of
https://github.com/usestrix/strix.git
synced 2026-08-25 12:22:37 +02:00
Merge remote-tracking branch 'origin/main' into mcp-support
# Conflicts: # strix/interface/viewer/frontend/src/components/live/tool-renderers/index.ts # strix/interface/viewer/static/assets/index-Bi_X6kI3.js # strix/interface/viewer/static/assets/index-DBJ-RJqo.js # strix/interface/viewer/static/assets/index-gEZK6bjO.js # strix/interface/viewer/static/index.html
This commit is contained in:
@@ -19,6 +19,11 @@ npx skills add usestrix/strix
|
||||
| `managed-pentesting-with-strix` | Drive the managed [app.strix.ai](https://app.strix.ai) platform over REST — no local Docker or LLM key needed |
|
||||
| `fix-security-vulnerabilities-with-strix` | Triage findings, fix root causes, and re-run Strix to verify each fix |
|
||||
| `ci-security-scanning-with-strix` | Add PR security scanning to GitHub Actions or any CI (self-hosted CLI or managed app) |
|
||||
| `application-security-testing` | Assess a whole product: choose the right test for each asset, then rank the findings into one remediation plan |
|
||||
| `web-app-penetration-testing` | Black-box pentest of a live web app or staging site — scope, credentials, and multi-account access-control testing |
|
||||
| `api-security-testing` | Test a REST/GraphQL API against the OWASP API Security Top 10 — schema-driven enumeration, BOLA/IDOR, authz |
|
||||
| `owasp-top-10-testing` | Systematic OWASP Top 10 assessment with honest per-category coverage |
|
||||
| `find-security-vulnerabilities-in-code` | White-box security review of a repo or working tree, with exploits to confirm findings |
|
||||
|
||||
Install a single skill with `npx skills add usestrix/strix --skill penetration-testing-with-strix`, or use one without installing:
|
||||
|
||||
|
||||
Reference in New Issue
Block a user