From d6a3ca7e58ac2bec3bf0d4a4950683fed18aeea4 Mon Sep 17 00:00:00 2001 From: Alex Schapiro Date: Thu, 20 Aug 2026 20:33:32 +0000 Subject: [PATCH] docs(skills): document --workspace-file for supporting files --- skills/api-security-testing/SKILL.md | 1 + skills/penetration-testing-with-strix/SKILL.md | 4 ++++ 2 files changed, 5 insertions(+) diff --git a/skills/api-security-testing/SKILL.md b/skills/api-security-testing/SKILL.md index 628c0c8c..94d3cf84 100644 --- a/skills/api-security-testing/SKILL.md +++ b/skills/api-security-testing/SKILL.md @@ -47,6 +47,7 @@ Out of scope: POST /billing/*, POST /notifications/broadcast." - **GraphQL:** point at the GraphQL endpoint and say whether introspection is enabled; call out that you want batching/aliasing abuse, depth/complexity limits, and per-field authorization tested. - **Internal/private APIs** unreachable from your machine: use the managed platform's network connector — see **managed-pentesting-with-strix**. - Use `--instruction-file` when the credential/context block gets long, and keep tokens out of shell history and out of committed files. +- **Supporting files** the agents should read but not test, such as an endpoint wordlist or handwritten notes about the tenancy model: pass `--workspace-file ./notes.md`. The file lands read-only in `/workspace`. Add `:DEST` to choose the path, for example `--workspace-file ./wordlist.txt:lists/wordlist.txt`. ## 3. Verify findings diff --git a/skills/penetration-testing-with-strix/SKILL.md b/skills/penetration-testing-with-strix/SKILL.md index c653d65d..1364ad8d 100644 --- a/skills/penetration-testing-with-strix/SKILL.md +++ b/skills/penetration-testing-with-strix/SKILL.md @@ -75,6 +75,9 @@ strix -n -t ./openapi.yaml -t https://api.staging.example.com # Many targets from a file, one per line strix -n --target-list ./targets.txt --max-budget 30 + +# Give the agents a file to work with (wordlist, spec, notes) without making it a target +strix -n -t https://staging.example.com --workspace-file ./wordlist.txt --max-budget 20 ``` A local path passed with `-t` is mounted into the sandbox **writable** — the agents can read and modify it, so point at a clean checkout, not uncommitted work you care about. @@ -88,6 +91,7 @@ Key flags: | `-n, --non-interactive` | Headless, exits on completion. Required for agents. | | `-m, --scan-mode` | `quick` (minutes) / `standard` (~30 min) / `deep` (hours, default). | | `--instruction` / `--instruction-file` | Credentials, focus areas, scope rules. | +| `--workspace-file PATH[:DEST]` | Place a file from this machine into `/workspace` read-only before the scan, for a wordlist, a spec, or notes. Repeatable. | | `--max-budget USD` | Hard LLM spend cap; scan wraps up cleanly at the limit. | | `--max-turns N` | Per-agent turn cap (default 500). | | `--resume RUN_NAME` | Resume a prior run from `strix_runs/`, with its agent history and targets. Cannot be combined with `-t`. |