strix

Automate security scanning of codebases and URLs with Docker-backed sandboxes.

40|9|Updated Jan 4, 2026
One-click install
npx skills add https://github.com/akillness/oh-my-skills --skill strix
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: strix
Source: https://github.com/akillness/oh-my-skills/tree/main/.agent-skills/strix
Command: npx skills add https://github.com/akillness/oh-my-skills --skill strix

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Strix provides an end-to-end security-scanning workflow for AI-assisted testing, enabling teams to perform automated vulnerability assessments across local codebases, GitHub repos, staging URLs, and domains with Docker-backed sandboxes and configurable LLM providers.

Core Features & Use Cases

  • Scan modes: quick, standard, and deep to match CI gates or in-depth releases.
  • Multi-target support: local paths, GitHub repositories, live URLs, or combinations thereof.
  • Configuration and orchestration: manage STRIX_LLM, LLM_API_KEY, and provider-specific settings; run scans in CI/CD or locally; view output artifacts under strix_runs.
  • Use Case: integrate Strix into a PR workflow to automatically validate changes for security findings before merging.

Quick Start

Run a quick Strix scan on a local project to validate the setup.

Frequently Asked Questions about strix

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate LLM-powered vulnerability scanning for codebases and staging URLs?▼

Automate LLM-powered vulnerability scanning by running Strix, which uses a Docker-backed sandbox to assess local codebases, GitHub repositories, and staging URLs. It requires a configured LLM provider via STRIX_LLM and LLM_API_KEY environment variables.

Can I integrate AI-driven security scans into CI/CD pipelines?▼

Yes, you can integrate AI-driven security scans into CI/CD workflows. Strix offers quick, standard, and deep scan modes to act as CI gates, automatically validating code changes for security findings before merging.

Do I need Docker to run automated pentest workflows with Strix?▼

Yes, Docker is required to run Strix automated pentest workflows. The security scanning tool uses a Docker-backed sandbox to safely execute vulnerability assessments across local and remote targets.

What is the best way to scan multiple GitHub repositories for security vulnerabilities at once?▼

The best way to scan multiple targets is using Strix's multi-target support, which concurrently processes local paths, GitHub repositories, and live URLs, saving output artifacts under the strix_runs directory for review.

How does LLM reasoning work for automated security assessments?▼

LLM reasoning enhances automated security assessments by analyzing target contexts and identifying potential vulnerabilities. Strix sends target data to a configured LLM provider, which reasons through the findings to produce production-quality assessments.

What are the limitations of using AI for vulnerability assessments in CI gates?▼

Limitations of AI vulnerability assessments include dependency on a configured LLM provider and Docker environment. Strix requires STRIX_LLM and LLM_API_KEY variables, and scan depth is constrained by the chosen quick, standard, or deep scan mode.