Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), broken object property level authorization (excessive data exposure and mass assignment), broken…
Install
npx skills add usestrix/strix --skill api-security-testingnpx skills add usestrix/strix --skill api-security-testing -a claude-code -gnpx skills add usestrix/strix --skill api-security-testing -a codex -ggemini skills install https://github.com/usestrix/strix.git --path skills/api-security-testinggh skill install usestrix/strix api-security-testinggit clone --depth 1 https://github.com/usestrix/strix /tmp/usestrix__strix
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/usestrix__strix/skills/api-security-testing ~/.claude/skills/api-security-testing # Claude Code
cp -R /tmp/usestrix__strix/skills/api-security-testing ~/.agents/skills/api-security-testing # Codex, Cursor, Gemini CLI, Copilot, OpenCode