penetration-testing-with-strix
79 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves vulnerabilities (OWASP Top 10 and beyond — injection, XSS, SSRF, auth/access-control flaws, IDOR, business logic) instead of just flagging them. Runs self-hosted with the open-source CLI or via the managed app.strix.ai cloud, and returns validated findings with proof-of-concept exploits (Markdown, JSON, CSV, SARIF). Use when the user asks to pentest, hack, sec…
What this skill can do
Downloads and installs other software
Sends data to these websites: strix.ai
Runs commands on your computer
Safer alternatives
- 100 Low riskperforming-web-application-penetration-test
- 100 Low riskweb-security-testing
- 100 Low riskPerforming Penetration Testing
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'penetration-testing-with-strix' ] || [ -L ~/.agents/skills/'penetration-testing-with-strix' ]; then echo 'A skill folder named penetration-testing-with-strix already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/rifuki/dotfiles' "$d" && git -C "$d" checkout --quiet '444b3433d7f135ac5dc5bf3794196b7c5ccab918' -- 'shared/.agents/skills/penetration-testing-with-strix' && mkdir -p ~/.agents/skills && cp -R "$d"/'shared/.agents/skills/penetration-testing-with-strix' ~/.agents/skills/'penetration-testing-with-strix' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'penetration-testing-with-strix' ~/.claude/skills/'penetration-testing-with-strix' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
[](https://zalavijaysinh.github.io/skilltrust/repos/rifuki/dotfiles/)
Score history
| Date | Version | Score |
|---|---|---|
| 2026-11-13 | 444b343 | 79 |