fix-security-vulnerabilities-with-strix
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the usestrix CLI tool to perform vulnerability scanning and verification. It also uses git commands to resolve repository branch information for diff-based scanning.
- [EXTERNAL_DOWNLOADS]: Interacts with the vendor's cloud platform at app.strix.ai via curl to fetch vulnerability findings and trigger re-scans.
- [PROMPT_INJECTION]: The skill processes external data from Strix reports (JSON, SARIF, and Markdown files) which may contain Proof-of-Concept (PoC) payloads. This creates a surface for indirect prompt injection.
- Ingestion points: Vulnerability finding files in strix_runs/, vulnerabilities.json, findings.sarif, and API responses from app.strix.ai.
- Boundary markers: Explicit delimiters or 'ignore' instructions for the ingested finding content are not defined.
- Capability inventory: Includes execution of the usestrix CLI, git operations, and network requests via curl.
- Sanitization: The instructions do not specify sanitization or escaping steps for the ingested finding data before processing.
Audit Metadata