find-security-vulnerabilities-in-code
usestrix/strix
Find security vulnerabilities in a codebase or repository with Strix — a white-box AI security review that reads your source, reasons about the actual data flow and authorization model, then exploits what it finds in a live sandbox so every reported issue has a working proof-of-concept instead of a noisy static-analysis alert. Covers injection, XSS, SSRF, broken access control and IDOR, insecure deserialization, secrets in code, unsafe dependencies, and business-logic flaws. Use when the user as
What it does
- Runs shell commands
- Installs packages
- Reaches docs.strix.ai, github.com, host.docker.internal
- Reads no environment variable
- Writes no files we can see
Findings (0)
The scanner found nothing risky in 1 file.
Decide which skills your team's agents may run
skillsvault scans every skill your organisation uses, blocks the ones you ban on every developer's machine, and keeps a tamper-evident record of every run. Free for one developer.
A deterministic scan of the skill's files as published today; it isn't a guarantee. It reads the files and reports what they do — nothing is run or installed.