SkillWorks

Skills

Subagents

Plugins

Marketplaces

SkillWorks

Skills

Subagents

Plugins

Marketplaces

Submit a repo

SkillWorks

Skills

Subagents

Plugins

Marketplaces

Submit a repo

Skills/Security/usestrix/strix

penetration-testing-with-strix

usestrix/strix
SkillLoads cleanly

Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves vulnerabilities…

Scores
84
out of 100 · grade A

2026-08-22

Works

40% of the score

86/100

  • References 2 files that are not in the repo: targets.txt, wordlist.txt.

Maintained

25% of the score

100/100

  • no commits in the last 12 weeks

Adopted

20% of the score

64/100

  • 3,466 installs on skills.sh.
  • 56,804 stars on the source repo.

Documented

15% of the score

81/100

  • 1,253 words with worked examples.
Loads cleanly. Every structural check Claude Code needs to register this passed. Last commit today.

Install

npx skills add usestrix/strix/penetration-testing-with-strix

What the check found

Every finding on this listing, and what each one means for whether it loads.
FindingWhat it means
Missing filesIt points at files that are not in the repository, so those steps will fail.

Files it references that are not in the repository

  • targets.txt
  • wordlist.txt

What it says it does

Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves vulnerabilities (OWASP Top 10 and beyond — injection, XSS, SSRF, auth/access-control flaws, IDOR, business logic) instead of just flagging them. Runs self-hosted with the open-source CLI or via the managed app.strix.ai cloud, and returns validated findings with proof-of-concept exploits (Markdown, JSON, CSV, SARIF). Use when the user asks to pentest, hack, security-scan, security-audit, or find vulnerabilities in an app, API, website, or repo.

Every number above came out of reading the file and its repository. Nothing is a judgement call, nothing is a model’s opinion, and nothing can be paid for. The full method is published. Source last committed 2026-08-21.

The record

Type
Skill
Category
Security
Repository
usestrix/strix
Last commit
today · 2026-08-21
Repository stars
57k
Installs
3,466
Licence
Apache-2.0
Instruction length
1,253 words
Bundled files
0
View the source on GitHub

Also in usestrix/strix

Other artifacts published from the same repository.
ArtifactScoreWhat the check foundTypeReachLast commit
ci-security-scanning-with-strixusestrix/strix
90
cleanSkill3,244 installstoday
managed-pentesting-with-strixusestrix/strix
90
cleanSkill3,225 installstoday
find-security-vulnerabilities-in-codeusestrix/strix
88
cleanSkill57k starstoday
fix-security-vulnerabilities-with-strixusestrix/strix
88
cleanSkill3,314 installstoday
owasp-top-10-testingusestrix/strix
88
cleanSkill57k starstoday
web-app-penetration-testingusestrix/strix
88
cleanSkill57k starstoday

Other security skills

Browse all
Same category, same type, ranked by score.
ArtifactScoreWhat the check foundCategoryReachLast commit
release-openclaw-ciopenclaw/openclaw
94
No licenseSecurity387k starstoday
site-architecturecoreyhaines31/marketingskills
94
cleanSecurity94,902 installstoday
cookbook-auditanthropics/claude-cookbooks
93
cleanSecurity52k stars2 days ago
asocoreyhaines31/marketingskills
93
cleanSecurity46,665 installstoday
openclaw-secret-scanning-maintaineropenclaw/openclaw
92
No licenseSecurity387k starstoday
graph-evolutiontrailofbits/skills
92
cleanSecurity2,860 installstoday

Put this measurement in your README

A badge carrying how many listings this index holds from the repository and how many pass every static structural check. It reads from this index every time somebody loads your page, so it changes when the measurement changes and there is nothing to keep up to date. Free, no account, and the value is not something you or we can set by hand.

SkillWorks badge

[![SkillWorks](https://toolproof.kynth.studio/badge/skillworks/usestrix/strix.svg)](https://skillworks.kynth.studio/?q=usestrix%2Fstrix)

Would rather not hotlink us? Every badge is also served in shields.io’s endpoint schema, so shields renders the image and your readers never talk to our domain:

Published by Toolproof, the masthead over this index and eight others. The method behind the number is at toolproof.kynth.studio/methodology, and the whole thing is readable as JSON with no key at /api.

Also from Kynth Studios

Built for the same person as SkillWorks

Toolproof

Independent measurement of AI agent tooling

toolproof.kynth.studio

BlockDex

Search public shadcn registries, item by item

blockdex.kynth.studio

KitGrade

SaaS starter kits, scored on what can be checked

kitgrade.kynth.studio

The studio list

One product, taken apart, once a month

Kynth Studios pulls one shipped product open every month — what it does, what it cost to build, what the pipeline behind it looks like, and what the numbers did. One email a month, nothing in between.

Double opt-in — we send one confirmation link and nothing else until you click it.

SkillWorks

Built by

Kynth Studios

the studio behind Toolproof, BlockDex and KitGrade

part of Toolproof, the measurement layer for AI agent tooling

Browse

Skills
Subagents
Plugins
Marketplaces
CLAUDE.md examples

Rankings

Best subagents
Best plugins
Most installed
Will not load

The index

Search
Categories
How we score

Reference

Submit a repository
Sponsor a section
Listings JSON
Privacy

© 2026 SkillWorks. A Kynth Studios product. Changelog

SkillWorks

The studio list

One product, taken apart, once a month

Kynth Studios pulls one shipped product open every month — what it does, what it cost to build, what the pipeline behind it looks like, and what the numbers did. One email a month, nothing in between.

Double opt-in — we send one confirmation link and nothing else until you click it.

SkillWorks

Built by

Kynth Studios

the studio behind Toolproof, BlockDex and KitGrade

part of Toolproof, the measurement layer for AI agent tooling

Browse

Skills
Subagents
Plugins
Marketplaces
CLAUDE.md examples

Rankings

Best subagents
Best plugins
Most installed
Will not load

The index

Search
Categories
How we score

Reference

Submit a repository
Sponsor a section
Listings JSON
Privacy

© 2026 SkillWorks. A Kynth Studios product. Changelog

SkillWorks

The studio list

One product, taken apart, once a month

Kynth Studios pulls one shipped product open every month — what it does, what it cost to build, what the pipeline behind it looks like, and what the numbers did. One email a month, nothing in between.

Double opt-in — we send one confirmation link and nothing else until you click it.

SkillWorks

Built by

Kynth Studios

the studio behind Toolproof, BlockDex and KitGrade

part of Toolproof, the measurement layer for AI agent tooling

Browse

Skills
Subagents
Plugins
Marketplaces
CLAUDE.md examples

Rankings

Best subagents
Best plugins
Most installed
Will not load

The index

Search
Categories
How we score

Reference

Submit a repository
Sponsor a section
Listings JSON
Privacy

© 2026 SkillWorks. A Kynth Studios product. Changelog

SkillWorks