Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud), triage by severity, patch the root cause rather than the symptom, and re-run Strix to prove each fix actually closes the exploit. Handles injection, XSS, SSRF, broken access control, IDOR, and other validated findings. Use after a Strix scan reports findings, or when the user asks to remediate, patch, or fix security issues from a strix_runs report, vulnerabilities.json, findings.sarif, or a cloud scan.
- Stars
- 73,546
- Version
- v1
- Copies
- 0
Overview
Waxell's checks found nothing alarming in what's published.
- Highest severity
- none
- Findings
- 0
- What ran
- Static analysis
A clean result means nothing alarming in what is published, not a guarantee. How the checks work
We don't republish the skill's instructions. Read them on GitHub at the reviewed commit.
Security
Security scan
Checked 2 days ago
Result
No issues Waxell's checks found nothing alarming in what's published.
Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work
Findings (0)
No findings in what's published.
Versions
Version history
Each distinct content we have seen, newest first, with the verdict it got at the time.
One version so far: v1, seen 2026-11-03.
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF
More security skills and plugins
- owasp-top-10-testingusestrixTest an application against the OWASP Top 10 with Strix, autonomous AI agents that attempt real exploits for each category of the current… No issuesSecurityEngineering74k
- web-app-penetration-testingusestrixPentest a web app or website end to end: black-box testing of a live URL, staging environment, or local dev server that finds and exploits… No issuesSecurityEngineering74k
007sickn33Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure… High riskSecurityAI & agents49k- hunt-laravelsickn33Hunt Laravel specific vulnerabilities High riskSecurityAI & agents49k