strix

Automate security scanning of codebases and URLs with Docker-backed sandboxes.

40|9|Updated Jan 4, 2026
One-click install
npx skills add https://github.com/akillness/oh-my-skills --skill strix
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: strix
Source: https://github.com/akillness/oh-my-skills/tree/main/.agent-skills/strix
Command: npx skills add https://github.com/akillness/oh-my-skills --skill strix

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Strix provides an end-to-end security-scanning workflow for AI-assisted testing, enabling teams to perform automated vulnerability assessments across local codebases, GitHub repos, staging URLs, and domains with Docker-backed sandboxes and configurable LLM providers.

Core Features & Use Cases

  • Scan modes: quick, standard, and deep to match CI gates or in-depth releases.
  • Multi-target support: local paths, GitHub repositories, live URLs, or combinations thereof.
  • Configuration and orchestration: manage STRIX_LLM, LLM_API_KEY, and provider-specific settings; run scans in CI/CD or locally; view output artifacts under strix_runs.
  • Use Case: integrate Strix into a PR workflow to automatically validate changes for security findings before merging.

Quick Start

Run a quick Strix scan on a local project to validate the setup.

Frequently Asked Questions about strix

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate LLM-powered vulnerability scanning for codebases and staging URLs?

Automate LLM-powered vulnerability scanning by running Strix, which uses a Docker-backed sandbox to assess local codebases, GitHub repositories, and staging URLs. It requires a configured LLM provider via STRIX_LLM and LLM_API_KEY environment variables.

Can I integrate AI-driven security scans into CI/CD pipelines?

Yes, you can integrate AI-driven security scans into CI/CD workflows. Strix offers quick, standard, and deep scan modes to act as CI gates, automatically validating code changes for security findings before merging.

Do I need Docker to run automated pentest workflows with Strix?

Yes, Docker is required to run Strix automated pentest workflows. The security scanning tool uses a Docker-backed sandbox to safely execute vulnerability assessments across local and remote targets.

What is the best way to scan multiple GitHub repositories for security vulnerabilities at once?

The best way to scan multiple targets is using Strix's multi-target support, which concurrently processes local paths, GitHub repositories, and live URLs, saving output artifacts under the strix_runs directory for review.

How does LLM reasoning work for automated security assessments?

LLM reasoning enhances automated security assessments by analyzing target contexts and identifying potential vulnerabilities. Strix sends target data to a configured LLM provider, which reasons through the findings to produce production-quality assessments.

What are the limitations of using AI for vulnerability assessments in CI gates?

Limitations of AI vulnerability assessments include dependency on a configured LLM provider and Docker environment. Strix requires STRIX_LLM and LLM_API_KEY variables, and scan depth is constrained by the chosen quick, standard, or deep scan mode.