find-security-vulnerabilities-in-code

From README

Find security vulnerabilities in code White-box security review with Strix: the agents read the source to build a model of routes, sinks, and authorization checks, then attempt real exploitation. Findings come with a proof-of-concept, so the output is a short list of proven issues rather than the hundreds of "potential" hits a pattern-matching scanner produces. , LLM , all flags, and the managed-cloud path are in the penetration-testing-with-strix skill. For a run with no Docker and no LLM key, the same binary drives the managed platform: strix cloud login, then strix cloud scans start ... (details in managed-pentesting-with-strix). Run it A local path is mounted into the sandbox writable, so the agents can modify it. Run against a clean checkout. Two things sharply improve results: Add a running instance of the app.