Strix AI Penetration Testing

Overview

This skill integrates Strix — the open-source AI penetration testing tool — into the REA_Skill agent ecosystem. Strix deploys autonomous AI hackers to find and fix your app's vulnerabilities, with seamless GitHub Actions / CI/CD integration to scan on every pull request and block insecure code before it reaches production.

Strix is strictly for targets you own or have explicit, written authorization to test. Unauthorized testing is illegal in most jurisdictions.

What Strix Does

• Autonomous AI hacking: AI agents that actively test your targets and propose fixes.
• CI/CD ready: Integrates with GitHub Actions to scan every pull request.
• Cloud scans: strix cloud scans start --engagement-type live_test --domain-ids <uuid> --wait
• Vulnerability listing: strix cloud vulns list --severity critical (JSON output supported)
• MCP servers: Connect your own Model Context Protocol servers via ~/.strix/mcp-servers.json and expose their tools to the agent during a run.
• REST API: Every cloud operation has a matching strix cloud <resource> <verb> command.

⚡ Integration with REA (Reverse Engineer Anything)