Skip to content
Get packs

Managed Pentesting with Strix

Run hosted security pentests of apps, APIs and code via the Strix cloud platform, no local setup needed

Source Download skill
Repository
usestrix/strix
Stars
73,304
Licence
Apache-2.0
Files
1 file

What it does

This skill teaches an AI agent to run Strix's autonomous penetration testing on Strix's own cloud platform instead of on your machine. The agent can sign in with the strix cloud CLI or REST API, register web apps, APIs, repositories or local source, start and monitor scans, review and update vulnerability findings, export SARIF, download compliance reports, trigger pull request security reviews, and set up schedules or webhooks. Results are tracked in a team dashboard, and no local Docker or LLM key is required.

Great for

  • Teams that want recurring or scheduled security testing tracked in a shared dashboard
  • Developers running security checks in hosted agent or CI environments where Docker is unavailable
  • Organizations that want managed scans without maintaining their own LLM keys or infrastructure

Skip it if

  • Testing systems you do not own or have written permission to test, since scans send traffic to your targets and the skill does not verify authorisation
  • Fully air-gapped or offline environments, because scans run on Strix's cloud and need network access; use the local open-source Strix skill instead
  • Users who must keep source code or target data off third-party servers, because local source is uploaded to the platform

Try asking

  • “Start a managed pentest of my staging web app and tell me the critical findings when it finishes”
  • “Upload this repository for a code review scan and export the results as SARIF”
  • “Set up a weekly scheduled scan of our production API and send failures to our webhook”
  • “Trigger a security review on this pull request and list open vulnerabilities by severity”
Step-by-step guide: how to use Managed Pentesting with StrixInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.

    managed-pentesting-with-strix.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip managed-pentesting-with-strix.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip managed-pentesting-with-strix.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Use the least-privilege scope list or a named scope profile instead of full access, and rotate tokens regularly
  • Keep the API token in an environment variable or CI secret store; never paste it into prompts or commit it
  • Confirm you have authorisation for every target before asking the agent to launch a scan, and review what source or data will be uploaded

What's inside

  • SKILL.md

Redistributed unmodified from usestrix/strix under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.