DEDUPED Hot AI repos, turned into use cases Get the Monday 5

How to scan your app for exploitable vulnerabilities with Strix

Point Strix at a local app directory and get findings that include validated proof-of-concept exploits.

Authorization notice. Strix is dual-use. Only use it on software, sites and systems you own or have explicit permission to test.

Credentials. The setup requires an LLM API key, which you should store securely and never commit to the repository.

Remote script. The install step pipes a script from Strix.ai directly into bash, so review it first if your policy requires it.

Who it is forA developer or small security team that needs a pentest-style check on an application before a release.

The problemManual pentests are slow and static analysis tools report many false positives.

The outcomeA set of findings from the scan, with exploits validated by the agents, saved to the strix_runs folder.

What you need first

  • Docker installed and running
  • An LLM API key from a supported provider, or a ChatGPT Plus/Pro subscription sign-in
  • The application source directory or a target URL you are authorized to test
  • A GitHub repository with Actions enabled, if you want the CI workflow

Steps

  1. Start Docker and confirm it is running.
  2. Run curl -sSL https://strix.ai/install | bash
  3. Run export STRIX_LLM="openrouter/z-ai/glm-5.3" and export LLM_API_KEY="your-api-key"
  4. Run strix --target ./app-directory
  5. Open the results in the strix_runs folder, or run strix view to see them in the local dashboard.

Prompt for your agent

Use the usestrix/strix repo to scan <target-app-directory> for vulnerabilities by running `strix --target <target-app-directory>` with STRIX_LLM and LLM_API_KEY set. Report the findings and the path to the strix_runs output. Verify that each reported finding includes a proof-of-concept or reproduction steps before you summarize it.

Caveat. The README does not state the cost of a scan, so check your LLM provider usage before running large targets.

Use this in your AI agent

Ask your agent

Using the Deduped MCP, get the setup steps for usestrix/strix and "Scan your app for exploitable vulnerabilities"

Add Deduped to Claude Code once

claude mcp add --transport http deduped https://dedupedai.com/mcp

Cursor, ChatGPT, others

Share: X LinkedIn Hacker News Email Copy link

Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer