Skip to content
ci-security-scanning-with-strix

Open source alternatives to ci-security-scanning-with-strix

24 open source AI Skills apps to use instead, best rated first.

Top picks

  1. G

    github-ops

    Launch

    github-ops is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It manages a GitHub repository with a focus on community health, CI reliability and the experience of contributors. It covers triaging issues by classify

    Open source

  2. O

    opensource-pipeline

    Launch

    opensource-pipeline is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It prepares a private project for safe public release through a three-stage pipeline. The fork stage strips secrets from a copy. The sanitise st

    Open source

  3. A

    andrej-karpathy-skills

    Launch

    andrej-karpathy-skills is a single CLAUDE.md file from the multica-ai project that is meant to improve how Claude Code behaves on coding tasks. It is derived from Andrej Karpathy's public observations about LLM coding pitfalls. The file dis

    Open source

  4. M

    microsoft/markitdown

    Launch

    markitdown-mcp is the MCP server package for MarkItDown, Microsoft's tool for converting many file formats to Markdown for language models. It is a lightweight server that runs over stdio, Streamable HTTP or SSE, and exposes one tool, conve

    Open source

  5. O

    od-contribute

    Launch

    od-contribute is an agent skill in the OpenDesign project that provides a guided, one-click contribution flow to the OpenDesign repository, written so that people without a coding background can send a real pull request. It is locked to the

    Open source

  6. G

    github-deep-research

    Launch

    github-deep-research is an agent skill from the DeerFlow project that researches a single GitHub repository in several rounds and writes a report in Markdown. It is for requests that need more than a README summary, such as a comprehensive

    Open source

More AI Skills apps

See all
7
M

modelcontextprotocol/server-everything

Exercises all features of the MCP protocol

Launch
8
M

modelcontextprotocol/server-filesystem

Direct local file system access

Launch
9
M

modelcontextprotocol/server-memory

Knowledge graph-based persistent memory for maintaining context

Launch
10
N

netdata/netdata#Netdata

Discovery, exploration, reporting and root cause analysis over Netdata metrics

Launch
11
L

Learn Claude Code

by shareAI-lab - A really interesting analysis of how coding agents like Claude

Launch
12
C

career-ops

Job-search skill collection for JD evaluation, ATS resumes, portal scans

Launch
13
S

Sequential Thinking

Dynamic and reflective problem-solving through thought sequences

Launch
14
R

Reactive Resume

A one-of-a-kind resume builder that keeps your privacy in mind

Launch
15
E

elie222/inbox-zero

Inbox Zero features on top of Gmail, such as finding emails

Launch
16
S

simple-issue-description

Turn a rough bug report, feature request, support note

Launch
17
C

Compound Engineering Plugin

by EveryInc - A very pragmatic set of well-designed agents, skills

Launch
18
S

SuperClaude

by SuperClaude-Org

Launch
19
M

MCP Toolbox for Databases

MCP Toolbox for Databases enables your agent to connect to your database

Launch
20
A

awslabs/mcp

Suite of servers for integrating with AWS services and resources

Launch
21
R

Ralph for Claude Code

by Frank Bria - An autonomous AI development framework

Launch
22
M

mobilerun

Automate your mobile devices with natural language commands

Launch
23
O

openstatus

Manage monitors, status pages

Launch
24
C

Claude Squad

by smtg-ai - A terminal app

Launch

About ci-security-scanning-with-strix

C

ci-security-scanning-with-strix

Add security scanning to CI/CD with Strix

ci-security-scanning-with-strix is a skill from the Strix project for adding security scanning to CI/CD, on GitHub Actions, GitLab CI or any pipeline, so that each pull request gets a diff-scoped AI pentest that can block the merge. It describes two ways to gate pull requests, which you can combine. The managed platform is connected once to the GitHub, GitLab or Bitbucket app, and it reviews every pull request with no workflow file, no runner and no LLM key, posting results as pull request comments and into a team dashboard. The self-hosted open-source CLI runs as a pipeline step inside your runner. It needs Docker on the runner and your own LLM key, and it is the choice for air-gapped or self-hosted CI. The self-hosted scan tests only the changed files, uses quick mode to stay fast, and returns exit code 2 when validated vulnerabilities are found, which fails the build. Both routes emit SARIF 2.1.0, so you can start with one and add the other later. The skill gives the GitHub Actions workflow for the self-hosted route, written as a security workflow file in .github/workflows. It is for teams that want security findings to appear as part of review, not as a separate audit later. It passes Gen Agent Trust Hub and Socket on skills.sh, and Snyk shows a warning. It has about 12,900 installs. Install it with npx skills add https://github.com/usestrix/strix --skill ci-security-scanning-with-strix.

Price
Free
Made by
usestrix
Category
AI Skills
Website
github.com/usestrix/strix/ci-security-scanning-with-strix