This skill wraps Strix, an AI-driven security testing CLI that runs vulnerability scans inside a Docker sandbox using an LLM for reasoning. You point it at local code, GitHub repos, or live URLs you're authorized to test, and it hunts for security issues using configurable scan depths from quick PR checks to deep bug bounty style exploration. The setup is straightforward if you've got Docker running and an OpenAI-compatible API key. It handles both white-box source analysis and black-box live testing, can combine multiple targets in one scan, and returns structured results with exit codes you can wire into CI. The instruction file approach for passing credentials and scope rules is cleaner than most pentest automation tools I've seen.
- install copies · 90 days. Times the install command was copied on this site in the last 90 days, bots filtered.
- 24
- skills.sh installs
- 151
- GitHub stars
- 22
- last updated
- Jun 3, 2026
Install
$ npx -y skills add akillness/oh-my-skills --skill strix --agent claude-codeInstalls into .claude/skills of the current project.
Files
strix - AI-Driven Application Security Testing
Keyword:
strix·ai pentest·vulnerability scan cli·strix ciOnly use Strix against systems you own or are explicitly authorized to test.
Strix is an AI-driven application security CLI. It runs scans inside a Docker-backed sandbox, uses an LLM provider for reasoning, and can assess local directories, GitHub repositories, live URLs, domains, and multi-target combinations.
When to use this skill
- Install Strix and verify Docker plus sandbox readiness
- Configure
STRIX_LLM,LLM_API_KEY, optionalLLM_API_BASE, and related runtime settings - Run local white-box scans against a repository or directory
- Run black-box or grey-box scans against staging or production-like URLs you are authorized to test
- Pass credentials, scope, or rules of engagement with
--instructionor--instruction-file - Choose the right scan depth:
quick,standard, ordeep - Run Strix headlessly in CI/CD and interpret exit codes
- Understand Strix's internal security "skills" and how they differ from this repo's skills
Instructions
Step 1: Install and preflight
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/akillness/oh-my-skills
- First seen
- Jun 3, 2026
More from akillness/oh-my-skills
All 81- Obsidian Cli148
- Steam Store Launch Ops143
- Code Refactoring251
- Data Analysis230
- Vercel React Best Practices230
- Technical Writing218
- Frontend Design System216
- Backend Testing211
- Rtk210
- Remotion Video Production206
- Video Production203
- Research Paper Writing196
- Web Accessibility192
- Graphify191
- Presentation Builder189
- Web Design Guidelines189
- Task Planning188
- User Guide Writing188
- Responsive Design187
- File Organization185
- Vibe Kanban185
- Codebase Search182
- Omc180
- Omx180
Recommended
cavemanjuliusbrussee/cavemanUltra-compressed communication mode. Cuts output tokens 65% (measured) by speaking like caveman while keeping full technical accuracy. Supports intensity levels618.3Kskills.sh installs
improveshadcn/improveSurvey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute. Strictly read-only on s40Kskills.sh installs
systematic-debuggingobra/superpowersUse when encountering any bug, test failure, or unexpected behavior, before proposing fixes326.7Kskills.sh installs
karpathy-guidelinesforrestchang/andrej-karpathy-skillsBehavioral guidelines to reduce common LLM coding mistakes through explicit assumptions, simplicity, and verifiable success criteria.17.9Kskills.sh installs
find-skillsvercel-labs/skillsHelps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express int4.3Mskills.sh installs