Commit Graph
44 Commits
Author SHA1 Message Date
0xallam d5166ad363 fix: Handle stray quotes in tag names and enforce parameter tags in prompt 2026-02-20 08:29:01 -08:00
0xallam a71a83d5ae feat: Normalize alternative tool call formats (invoke/function_calls) 2026-02-20 08:29:01 -08:00
0xallam c6c32be8dd feat: Add mouse text selection auto-copy to clipboard in TUI
Enable native text selection across tool components and agent messages
with automatic clipboard copy, toast notification, and decorative icon
stripping. Replace Padding wrappers with Text to support selection
across multiple renderables.
2026-02-07 11:04:31 -08:00
0xallam 47caa0f525 refactor: standardize vulnerability skills format 2026-01-20 12:50:59 -08:00
0xallam 583c9e3df0 docs(tools): add comprehensive multiline examples and remove XML terminology
- Add professional, realistic multiline examples to all tool schemas
- finish_scan: Complete pentest report with SSRF/access control findings
- create_vulnerability_report: Full SSRF writeup with cloud metadata PoC
- file_edit, notes, thinking: Realistic security testing examples
- Remove XML terminology from system prompt and tool descriptions
- All examples use real newlines (not literal \n) to demonstrate correct usage
2026-01-15 17:25:28 -08:00
0xallam da78cab2b9 chore(prompt): discourage literal \n in tool params 2026-01-14 21:29:06 -08:00
0xallam 2295bb6ba7 chore(prompt): enforce single tool call per message and remove stop word usage 2026-01-14 19:51:08 -08:00
0xallam 2052d66e27 fix(agent): fix agent loop hanging and simplify LLM module
- Fix agent loop getting stuck by adding hard stop mechanism
- Add _force_stop flag for immediate task cancellation across threads
- Use thread-safe loop.call_soon_threadsafe for cross-thread cancellation
- Remove request_queue.py (eliminated threading/queue complexity causing hangs)
- Simplify llm.py: direct acompletion calls, cleaner streaming
- Reduce retry wait times to prevent long hangs during retries
- Make timeouts configurable (llm_max_retries, memory_compressor_timeout, sandbox_execution_timeout)
- Keep essential token tracking (input/output/cached tokens, cost, requests)
- Maintain Anthropic prompt caching for system messages
2026-01-14 18:54:45 -08:00
0xallam 19f9139032 fix(agent): use correct agent name in identity instead of class name 2026-01-14 11:24:24 -08:00
0xallam 54c11868f8 fix(agent): fix tool schemas not retrieved on pyinstaller binary and validate tool call args 2026-01-14 10:57:32 -08:00
Daniel Sangorrin 07102553f8 fix: add thinking blocks 2026-01-09 15:40:21 -08:00
0xallam 6e7a77cf78 Add PostHog integration for analytics and error debugging 2026-01-09 14:24:04 -08:00
0xallam 2af25fd225 fix: add timeout handling for Docker operations and improve error messages
- Add SandboxInitializationError exception for sandbox/Docker failures
- Add 60-second timeout to Docker client initialization
- Add _exec_run_with_timeout() method using ThreadPoolExecutor for exec_run calls
- Catch ConnectionError and Timeout exceptions from requests library
- Add _handle_sandbox_error() and _handle_llm_error() methods in base_agent.py
- Handle sandbox_error_details tool in TUI for displaying errors
- Increase TUI truncation limits for better error visibility
- Update all Docker error messages with helpful hint:
  'Please ensure Docker Desktop is installed and running, and try running strix again.'
2026-01-08 17:41:44 -08:00
0xallam ea1bb0b0ed feat(reporting): add LLM-based vulnerability deduplication
- Add dedupe.py with XML-based LLM deduplication using direct litellm calls
- Integrate deduplication check in create_vulnerability_report tool
- Add get_existing_vulnerabilities() method to tracer for fetching reports
- Update schema and system prompt with deduplication guidelines
2026-01-07 19:32:45 -08:00
0xallam 372a4a287e Refactor(skills): rename prompt modules to skills and update documentation 2026-01-06 17:50:15 -08:00
0xallam 013806f4d2 feat(agent): implement user interruption handling in agent execution 2026-01-06 16:44:22 -08:00
0xallam 82ec0f8266 feat(tui): add real-time streaming LLM output with full content display
- Convert LiteLLM requests to streaming mode with stream_request()
- Add streaming parser to handle live LLM output segments
- Update TUI for real-time streaming content rendering
- Add tracer methods for streaming content tracking
- Clean function tags from streamed content to prevent display
- Remove all truncation from tool renderers for full content visibility
2026-01-06 16:44:22 -08:00
0xallam 758bd4836c enhance todo tool prompt 2025-12-15 10:26:59 -08:00
0xallam 281c3855f6 feat(tools): add bulk operations support to todo tools
- update_todo: add `updates` param for bulk updates in one call
- mark_todo_done: add `todo_ids` param to mark multiple todos done
- mark_todo_pending: add `todo_ids` param to mark multiple pending
- delete_todo: add `todo_ids` param to delete multiple todos
- Increase todo renderer display limit from 10 to 25
- Maintains backward compatibility with single-ID usage
- Update prompts to keep todos short-horizon and dynamic
2025-12-14 20:31:33 -08:00
Ahmed Allam ba065526e2 feat(tui): add markdown rendering for agent messages (#197)
Add AgentMessageRenderer to render agent messages with basic markdown support:
- Headers (#, ##, ###, ####)
- Bold (**text**) and italic (*text*)
- Inline code and fenced code blocks
- Links [text](url) and strikethrough

Update system prompt to allow agents to use simple markdown formatting.
2025-12-14 22:53:07 +04:00
Ahmed Allam b553289991 feat(tools): add dedicated todo tool for agent task tracking (#196)
- Add new todo tool with create, list, update, mark_done, mark_pending, delete actions
- Each subagent has isolated todo storage keyed by agent_id
- Support bulk todo creation via JSON array or bullet list
- Add TUI renderers for all todo actions with status markers
- Update notes tool to remove priority and todo-related functionality
- Add task tracking guidance to StrixAgent system prompt
- Fix instruction file error handling in CLI
2025-12-14 22:16:02 +04:00
TrusthoodiesandAhmed Allam d7cef8cd25 Add open redirect, subdomain takeover, and info disclosure prompt modules (#132)
Co-authored-by: Ahmed Allam <ahmed39652003@gmail.com>
2025-11-25 10:32:55 +00:00
Ahmed Allam 30986397b8 feat(agent): implement agent identity guidline and improve system prompt 2025-11-15 16:21:05 +04:00
Ahmed Allam 0d21f586e6 fix(agent): increase waiting time threshold from 120 to 600 seconds 2025-11-15 12:39:46 +04:00
Ahmed Allam 374faae1fd feat: support scanning IP addresses 2025-11-14 01:38:58 +04:00
Ahmed Allam 7cd18a1868 feat: add error handling for headless mode in agent execution and improve CLI on scan failures 2025-11-01 03:29:44 +02:00
Ahmed Allam 9b16e411d1 feat: enhance agent prompt for multi-target testing 2025-11-01 02:38:37 +02:00
Ahmed Allam 23ace6aac2 feat: implement multi-target scanning 2025-11-01 02:38:37 +02:00
Ahmed Allam 7cbfecc2d5 feat: Add iteration limit warnings for agent 2025-10-31 21:07:21 +02:00
Ahmed Allam 713f817e3a feat: Increase agents max_iterations to 300 2025-10-31 21:07:21 +02:00
Ahmed Allam ec45205fce refactor: Migrate tracer to new telemetry module 2025-10-31 21:07:21 +02:00
Ahmed Allam 833e4dfdce feat(interface): Introduce non-interactive CLI mode and restructure UI layer 2025-10-31 21:07:21 +02:00
Ahmed Allam af9f5285ed refactor: Update agent instructions and descriptions 2025-10-28 13:17:46 -07:00
Ahmed Allam 1a3d924ffe feat: Implement waiting timeout handling in BaseAgent and AgentState 2025-10-28 13:17:46 -07:00
Ahmed Allam 29baf39564 feat: Add prompt module collections and contributing.md (#40) 2025-10-10 10:41:42 +01:00
Ahmed Allam d5cad65ed8 Adding more verbose logging for llm failed requests (#30) 2025-09-14 15:56:07 -07:00
Ahmed Allam 23a11a3cc6 Better handling of LLM request failures 2025-09-10 15:39:01 -07:00
Ahmed Allam 56903552ef Improving prompts 2025-09-09 23:38:23 -07:00
Ahmed Allam 7763491ee2 Fix docker container creation issue 2025-09-09 00:02:39 -07:00
Ahmed Allam 37b68ecb92 Improving prompts 2025-09-08 23:54:06 -07:00
Ahmed Allam 312fc936cf Running all agents under same container (#12) 2025-08-18 21:58:38 +01:00
Ahmed Allam 08ce23f410 Clone git repositories internally (#10) 2025-08-16 23:47:36 +01:00
Ahmed Allam 344a8e3db7 Adding full support for gpt-5 models (#5) 2025-08-15 21:02:39 +01:00
Ahmed Allam 81ac98e8b9 Open-source release for Alpha version 2025-08-08 20:36:44 -07:00