forkless/strix
1
0
Fork 0
mirror of https://github.com/usestrix/strix.git synced 2026-08-25 04:12:37 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat(safety): collect target-list files passed via -w/-l flags

Browse Source 
Recon tools route their target list through a flag — `ffuf -w wordlist.txt`,
`httpx -l hosts.txt`, `nuclei --list targets.txt` — not the `<` redirect the
input-file collector already handled, so the reviewer kept blocking "probes
every host listed in hosts.txt" because the list was never in the packet. Parse
the value of the common list-file flags and collect it the same bounded way,
alongside redirect inputs. The value is only read when it resolves to a
workspace file, so a boolean `-l` (grep, wc) whose next token is not a file
collects nothing and never makes the packet incomplete.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This commit is contained in:
oyasumi
2026-08-08 17:57:08 +00:00
co-authored by Claude Opus 5
parent dad35b9e5f
commit 3c4be45d34
3 changed files with 91 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/usage/safety-modes.mdx
+7 -6
View File
@@ -82,12 +82,13 @@ A command that runs code Strix cannot resolve to an inspectable script — an
unrecognized interpreter, or an interpreter given no script — is blocked rather
than reviewed against an empty evidence packet.
When a command reads a workspace data file through input redirection (for
example a host list consumed by `while read … done < hosts.txt`), that file's
contents are attached to the packet so the reviewer can check the entries —
queried hosts, fuzz inputs — against scope instead of blocking because it can't
see them. Only workspace-resident files are read; an oversize file is attached
truncated. An authorized domain covers its subdomains.
When a command reads a workspace data file — through input redirection
(`while read … done < hosts.txt`) or a target-list flag (`ffuf -w words.txt`,
`httpx -l hosts.txt`) — that file's contents are attached to the packet so the
reviewer can check the entries, queried hosts or fuzz inputs, against scope
instead of blocking because it can't see them. Only workspace-resident files are
read; an oversize file is attached truncated. An authorized domain covers its
subdomains.
Browser automation inside scripts is blocked in safety modes. Issue browser
operations as individual raw `agent-browser` commands so each action can be