Skill rating
9 skills. The A–F grade combines safety (60%) and quality (40%); tests add a bonus. The rating refreshes automatically from open catalogs.
ManufacturingLogistics and warehouseProcurementQuality controlContact centreField serviceFinanceCustomer supportindustry shortcuts
| # | Grade | Skill | Score ▾ | Safety | Quality | Process | Tests | Popularity | Updated |
|---|---|---|---|---|---|---|---|---|---|
| 1 | B | fix-security-vulnerabilities-with-strixIntegrationSecurityData and analyticsusestrix/strixAgent Skills Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause rather than the symptom, and re-run Strix to prove each fix act | 98 | 85 | C | — | — | 2 d ago | |
| 2 | B | find-security-vulnerabilities-in-codeAnalyzerGitHubSoftware developmentSecurityusestrix/strixAgent Skills Find security vulnerabilities in a codebase or repository with Strix — a white-box AI security review that reads your source, reasons about the actual data flow and authorization model, then exploits | 98 | 82 | D | — | — | 2 d ago | |
| 3 | B | Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability | 97 | 85 | D | — | — | 2 d ago | |
| 4 | B | Test an application against the OWASP Top 10 with Strix — autonomous AI agents that attempt real exploits for each category of the current OWASP Top 10:2025 (broken access control including SSRF, secu | 96 | 85 | C | — | — | 2 d ago | |
| 5 | B | Pentest a web app or website end to end — black-box testing of a live URL, staging environment, or local dev server that finds and exploits real vulnerabilities (auth bypass, broken access control, ID | 95 | 85 | C | — | — | 2 d ago | |
| 6 | B | ci-security-scanning-with-strixProcedureGitHubGitLabSoftware developmentInfrastructureusestrix/strixAgent Skills Add security scanning to CI/CD with Strix — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks vulnerable code before it merges, with results | 94 | 85 | C | — | — | 2 d ago | |
| 7 | B | penetration-testing-with-strixIntegrationDockerSecuritySoftware developmentusestrix/strixAgent Skills Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves vulnerabilities (OWASP Top 10 and beyond — injection, XSS, SSRF | 94 | 85 | C | — | — | 2 d ago | |
| 8 | B | Application security testing (AppSec) across a whole product with Strix — decide which asset needs which test (source code, running web app, API, CI pipeline), run it, and turn the results into a rank | 96 | 81 | C | — | — | 2 d ago | |
| 9 | C | managed-pentesting-with-strixIntegrationDockerGitHubSoftware developmentData and analyticsusestrix/strixAgent Skills Run a managed pentest of a web app, API, repository, or local workspace on the app.strix.ai platform with the `strix cloud` CLI or REST API — no local Docker or LLM key needed. Safely review and uploa | 95 | 75 | C | — | — | 2 d ago |