xalgordCommunity·150 Agent Skills Included

xalgorix

Autonomous AI penetration testing with exploit-verified security findings

Runs autonomous penetration tests that re-exploit every finding before reporting, eliminating false positives. Covers web, cloud, AI/LLM, Active Directory, firmware, and OT/ICS security testing with 30+ guided skill workflows. Self-hosted with your own LLM, keeping all scan data private while generating CVSS-scored PDF reports.

954|172

↗

npx skills add xalgord/xalgorix --all -g -y

All Skills in This Repository (150)

Pure Emerald Level Indicators

📦 In Repo

xalgord

supabase

Detect misconfigurations and vulnerabilities in Supabase deployments.

firebase-firestore

Identify and remediate Firebase security misconfigurations in Firestore, Realtime Database, and Cloud Functions.

root-agent

Coordinate specialized agents for end-to-end security assessments with unified reporting.

azure-security

Test Azure security weaknesses across Blob storage, IMDS, Azure AD tokens, and Function App SSRF.

kubernetes-security

Audit Kubernetes deployments for misconfigurations and insecure access vectors.

quick

Automate time-boxed vulnerability assessments for web and API targets.

deep

Discover chained vulnerabilities across applications and infrastructure during penetration tests.

standard

Automate multi-phase security assessments across application attack surfaces.

express

Test Express.js apps for prototype pollution, body-parser quirks, and path traversal.

fastapi

Assess security weaknesses in FastAPI applications across DI, middleware, and auth.

nextjs

Identify authorization, caching, and runtime vulnerabilities in Next.js applications.

nestjs

Identify authentication, validation, and module boundary weaknesses in NestJS applications.

Community

Advanced

Frequently Asked Questions

FAQPage Schema

How to install Xalgorix?▼

Run `npx skills add xalgord/xalgorix --all -g -y` in your terminal to install the full skill suite globally.

What does Xalgorix do differently from a vulnerability scanner?▼

It runs an autonomous AI agent through a full pentest methodology, then an independent verifier re-exploits each finding so you only get proven vulnerabilities, not a list of maybes.

Which security areas do the Xalgorix skills cover?▼

The skills cover incident response, AI/LLM security testing, compliance (ISO 27001, PCI DSS, GDPR, NIST CSF), deception technology, firmware analysis, and OT/ICS industrial security.

Does Xalgorix send my data to the cloud?▼

No. It is self-hosted and bring-your-own-LLM, so scan data, API keys, and target information never leave your infrastructure.

Can I use Xalgorix on any target?▼

Only on systems you own or have explicit written permission to test, since it performs real exploitation to verify findings.