Run Authorized Penetration Tests with Strix
Application security teams need reproducible testing with clear scope, costs, and evidence. This skill guides Strix setup, authorized scans, and interpretation of validated findings.
이 Skill을 자동으로 설치하지 마세요.
공식 정책에 따라 설치 작업 전에 운영자 검토가 필요합니다.
이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.
Review the Skillstore skill "penetration-testing-with-strix" from https://skillstore.io/skills/usestrix-penetration-testing-with-strix.md and its manifest at https://skillstore.io/api/skills/usestrix-penetration-testing-with-strix/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.
AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.
"penetration-testing-with-strix" 사용 중입니다. Prepare an authorized local scan plan for a disposable checkout with a ten-dollar budget.
예상 결과:
"penetration-testing-with-strix" 사용 중입니다. Show how an authorized staging API report could summarize findings without exposing credentials.
예상 결과:
Most static matches are Markdown, documentation URLs, example targets, or placeholder configuration, not executable backticks or leaked secrets. The installer executes unverified remote code, while prose also risks credential exposure and misleading privacy expectations. No evidence found of prompt injection or deliberate credential exfiltration in the reviewed file.
이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.
버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.
https://skillstore.io/skills/usestrix-penetration-testing-with-strix/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/usestrix-penetration-testing-with-strix?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/usestrix-penetration-testing-with-strix?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/usestrix-penetration-testing-with-strix/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/usestrix-penetration-testing-with-strix.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>usestrix. (2026). penetration-testing-with-strix security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/usestrix-penetration-testing-with-strix/audits/1@techreport{usestrix-usestrix-penetration-testing-with-strix-2026,
author = {usestrix},
title = {penetration-testing-with-strix security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/usestrix-penetration-testing-with-strix/audits/1},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "penetration-testing-with-strix security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "usestrix"
date-released: "2026-10-25"
url: "https://skillstore.io/skills/usestrix-penetration-testing-with-strix/audits/1"
identifiers:
- type: other
value: "skillstore:usestrix-penetration-testing-with-strix:audit:1"
description: "Skillstore immutable audit report identifier"
Plan an authorized local scan against a disposable repository checkout, with spending limits and evidence-based remediation priorities.
Combine an API specification with an authorized staging endpoint, then summarize validated findings and testing coverage.
Select diff scope, a comparison reference, budget caps, severity thresholds, and SARIF artifacts for a headless pipeline.
Help me prepare an authorized Strix scan of my staging application. Check prerequisites and compare local and cloud options. Request approval before installation.
I authorize testing of [disposable checkout]. Prepare a headless standard scan with a [USD] budget cap. Confirm scope and model data-sharing settings before execution.
I authorize testing of [staging API] using [API specification]. Set a [USD] budget cap. Confirm exclusions and load dedicated test credentials from a protected instruction file.
Plan an authorized headless Strix gate for [repository] against [base reference]. Use diff scope, a [USD] cap, and a high-severity failure threshold. Include SARIF collection and incomplete-coverage checks.
작성자
usestrix라이선스
Apache-2.0
Skillstore 리비전
r1
버전 안내
작성자가 버전을 선언하지 않았습니다.
참조
3f8a1d29da5ce6b43040d9f873e9ea84c90a2a52
유지보수 최신성
2026. 10. 25.
사용량
0 다운로드 · 0 조회
파일 구조
📄 SKILL.md
Test Authorized Web Apps with Strix
Web application reviews can miss vulnerabilities behind login and across tenant boundaries. This skill guides authorized Strix testing, evidence review, and repeat testing after fixes.
Assess Applications Against the OWASP Top 10
Security assessments can miss categories or confuse incomplete coverage with a clean result. This skill guides Strix testing and evidence-based reporting against OWASP Top 10:2025.
Fortalecer las revisiones de seguridad de aplicaciones
작성자 alirezarezvani
Las revisiones de seguridad a menudo carecen de listas de verificación coherentes y flujos de trabajo reutilizables. Esta skill proporciona estructuras base para revisiones de seguridad, orientación de referencia y scripts simples de informes para Claude, Codex y Claude Code.
Auditar Flujos de Trabajo de Metasploit de Forma Segura
작성자 AgentSecOps
Los equipos de seguridad necesitan una revisión estructurada de la validación autorizada de exploits, pero estos flujos de trabajo conllevan un alto riesgo de uso indebido. Esta skill documenta pasos de evaluación con Metasploit con comprobaciones de alcance, registro y orientación de limpieza.
Evaluar riesgos de XSS e inyección HTML
작성자 sickn33
Las fallas de inyección del lado del cliente pueden exponer sesiones, datos de cuentas y la confianza de los usuarios. Esta habilidad ayuda a los testers autorizados a estructurar evaluaciones de XSS con una guía clara de remediación.
Ejecutar pruebas de seguridad web OWASP
작성자 sickn33
Los equipos web necesitan una forma repetible de comprobar riesgos comunes de aplicaciones antes del lanzamiento. Esta habilidad organiza las pruebas OWASP en fases, prompts y pasos de generación de informes.
Revisar los riesgos de seguridad de una aplicación
작성자 Bikach
Las revisiones de seguridad pueden pasar por alto problemas relacionados con la autenticación, el manejo de entradas, las API y los secretos. Esta habilidad proporciona orientación estructurada, listas de comprobación y patrones de remediación para tareas de seguridad de aplicaciones.
Generar informes de evaluación de seguridad
작성자 BytR-Ecosystems
Los hallazgos de seguridad son difíciles de presentar con claridad a ejecutivos y equipos técnicos. Esta skill crea informes DOCX estructurados con calificaciones de riesgo y orientación de remediación.