Pentest a web app or website end to end — black-box testing of a live URL, staging environment, or local dev server that finds and exploits real vulnerabilities (auth bypass, broken access control, IDOR, injection, XSS, SSRF, business logic) and proves each one with a working proof-of-concept instead of a signature match.
Install
npx skills add usestrix/strix --skill web-app-penetration-testingnpx skills add usestrix/strix --skill web-app-penetration-testing -a claude-code -gnpx skills add usestrix/strix --skill web-app-penetration-testing -a codex -ggemini skills install https://github.com/usestrix/strix.git --path skills/web-app-penetration-testinggh skill install usestrix/strix web-app-penetration-testinggit clone --depth 1 https://github.com/usestrix/strix /tmp/usestrix__strix
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/usestrix__strix/skills/web-app-penetration-testing ~/.claude/skills/web-app-penetration-testing # Claude Code
cp -R /tmp/usestrix__strix/skills/web-app-penetration-testing ~/.agents/skills/web-app-penetration-testing # Codex, Cursor, Gemini CLI, Copilot, OpenCode