Run Authorized Penetration Tests with Strix
Application security teams need reproducible testing with clear scope, costs, and evidence. This skill guides Strix setup, authorized scans, and interpretation of validated findings.
請勿自動安裝此 Skill。
權威政策要求在執行任何安裝操作前由操作人員審查。
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
Review the Skillstore skill "penetration-testing-with-strix" from https://skillstore.io/skills/usestrix-penetration-testing-with-strix.md and its manifest at https://skillstore.io/api/skills/usestrix-penetration-testing-with-strix/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
正在使用「penetration-testing-with-strix」。 Prepare an authorized local scan plan for a disposable checkout with a ten-dollar budget.
預期結果:
正在使用「penetration-testing-with-strix」。 Show how an authorized staging API report could summarize findings without exposing credentials.
預期結果:
Most static matches are Markdown, documentation URLs, example targets, or placeholder configuration, not executable backticks or leaked secrets. The installer executes unverified remote code, while prose also risks credential exposure and misleading privacy expectations. No evidence found of prompt injection or deliberate credential exfiltration in the reviewed file.
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
https://skillstore.io/skills/usestrix-penetration-testing-with-strix/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/usestrix-penetration-testing-with-strix?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/usestrix-penetration-testing-with-strix?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/usestrix-penetration-testing-with-strix/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/usestrix-penetration-testing-with-strix.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>usestrix. (2026). penetration-testing-with-strix security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/usestrix-penetration-testing-with-strix/audits/1@techreport{usestrix-usestrix-penetration-testing-with-strix-2026,
author = {usestrix},
title = {penetration-testing-with-strix security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/usestrix-penetration-testing-with-strix/audits/1},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "penetration-testing-with-strix security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "usestrix"
date-released: "2026-10-25"
url: "https://skillstore.io/skills/usestrix-penetration-testing-with-strix/audits/1"
identifiers:
- type: other
value: "skillstore:usestrix-penetration-testing-with-strix:audit:1"
description: "Skillstore immutable audit report identifier"
Plan an authorized local scan against a disposable repository checkout, with spending limits and evidence-based remediation priorities.
Combine an API specification with an authorized staging endpoint, then summarize validated findings and testing coverage.
Select diff scope, a comparison reference, budget caps, severity thresholds, and SARIF artifacts for a headless pipeline.
Help me prepare an authorized Strix scan of my staging application. Check prerequisites and compare local and cloud options. Request approval before installation.
I authorize testing of [disposable checkout]. Prepare a headless standard scan with a [USD] budget cap. Confirm scope and model data-sharing settings before execution.
I authorize testing of [staging API] using [API specification]. Set a [USD] budget cap. Confirm exclusions and load dedicated test credentials from a protected instruction file.
Plan an authorized headless Strix gate for [repository] against [base reference]. Use diff scope, a [USD] cap, and a high-severity failure threshold. Include SARIF collection and incomplete-coverage checks.
作者
usestrix授權
Apache-2.0
Skillstore 修訂
r1
版本提示
作者未聲明版本。
引用
3f8a1d29da5ce6b43040d9f873e9ea84c90a2a52
維護新鮮度
2026/10/25
使用量
0 次下載 · 0 次瀏覽
檔案結構
📄 SKILL.md
Assess Applications Against the OWASP Top 10
Security assessments can miss categories or confuse incomplete coverage with a clean result. This skill guides Strix testing and evidence-based reporting against OWASP Top 10:2025.
Test Authorized Web Apps with Strix
Web application reviews can miss vulnerabilities behind login and across tenant boundaries. This skill guides authorized Strix testing, evidence review, and repeat testing after fixes.
強化應用程式安全審查
由 alirezarezvani
安全審查通常缺乏一致的檢查清單和可重複使用的工作流程。此技能為 Claude、Codex 和 Claude Code 提供安全審查腳手架、參考指南和簡單的報告指令碼。
安全稽核 Metasploit 工作流程
由 AgentSecOps
安全團隊需要對已授權的漏洞利用驗證進行結構化審查，但這些工作流程具有很高的誤用風險。此技能記錄 Metasploit 評估步驟，並包含範圍檢查、記錄與清理指引。
評估 XSS 與 HTML 注入風險
由 sickn33
用戶端注入缺陷可能暴露工作階段、帳戶資料，並損害使用者信任。此技能可協助經授權的測試人員以結構化方式進行 XSS 評估，並提供清楚的修補指引。
執行 OWASP Web 安全測試
由 sickn33
Web 團隊需要一種可重複執行的方法，在發布前檢查常見的應用程式風險。此技能會將 OWASP 測試整理為階段、提示詞與報告步驟。
審查應用程式安全風險
由 Bikach
安全審查可能遺漏身分驗證、輸入處理、API 和機密資訊等方面的問題。此技能為應用程式安全工作提供結構化指引、檢查清單和修復模式。
產生安全性評估報告
由 BytR-Ecosystems
安全性發現很難清楚呈現給高階主管和技術團隊。此技能會建立結構化 DOCX 報告，包含風險評級和修復指引。