← back to report

usestrix/strix

// all events — 2026-08-22

Type AI Score Description Actor Reason Date
commit 1.00 fix(agents): let an agent wait on what it already said (#102 Commit message contains explicit AI assi 2026-08-08
commit 1.00 test(tui): correct the nudge the internal-turn test asserts Commit message contains explicit AI assi 2026-08-08
commit 1.00 fix(tui): make the mount prompt clickable, and skip the moun Commit message contains explicit AI assi 2026-08-08
pr 1.00 feat(llm): add first-class llmtr/ provider prefix for the LL Explicitly states it was generated with 2026-08-22
pr 1.00 docs(llm-providers): add LLMTR AI gateway provider Explicitly states it was generated with 2026-08-22
pr 1.00 fix(scope): reconcile web targets as hosts Explicitly states it was generated with 2026-08-18
pr 1.00 feat: add STRIX_DISABLE_FIX_AGENTS to skip dedicated fix sub Explicitly states it was generated with 2026-06-29
pr 1.00 fix(proxy): actionable errors for bad list_requests/list_sit Explicitly states it was generated with 2026-06-15
pr 1.00 fix: prevent long scans from hanging or dying on fd exhausti Explicitly states it was generated with 2026-06-29
pr 1.00 fix(tui): don't double-render finish_scan section headings Explicitly states it was generated with 2026-07-17
pr 1.00 feat(cli): --run-name for deterministic, resumable run dirs Explicitly states it was generated with 2026-07-16
pr 0.95 Add MCP server support Explicitly links to a Devin session, ind 2026-08-20
pr 0.78 feat(prompts): add 6 new vulnerability prompt modules Highly comprehensive, generic catalog of 2025-12-21
pr 0.72 fix(core): Graceful handling of NFE loops and incremental SA Emoji-labeled generic What/Why/Verificat 2026-07-19
pr 0.68 feat: Add text-tags fallback mode for LLM tool calling (fixe Polished, generic explanatory phrasing s 2026-08-22
pr 0.61 Fix: Add macOS Docker socket detection fallback (Fixes #164) Very polished boilerplate emphasizes com 2025-12-12
pr 0.56 Adds scan resumption capability to Strix, allowing users to Repetitive, unusually polished structure 2026-01-02
pr 0.48 feat(telemetry): default-off + first-run disclosure Polished compliance rationale is somewha 2026-07-04
pr 0.42 fix(config): atomic write + 0o600 enforcement in persist_cur Highly polished security prose, though t 2026-07-04
pr 0.40 added disposable email skill Generic capability summary, though its t 2026-06-11
pr 0.38 feat: Add live tracing mode for complete audit trail Highly structured and polished, though t 2026-02-03
pr 0.34 feat: add graceful wrap-up command for agents Polished summary with generic phrasing, 2026-01-04
pr 0.32 feat: add MiniMax as LLM provider (M3 default, with M2.7 fal Polished and comprehensive, but mostly s 2026-03-23
pr 0.28 fix(core): compile fallback report if agent misses lifecycle Highly structured explanatory prose uses 2026-07-03
pr 0.28 Handle large exec_command output and surface scan errors as Structured summary with some generic phr 2026-06-22
pr 0.25 feat: browser-use tool migration Polished but informal technical descript 2026-03-11
pr 0.24 fix(interface): add timeout to git clone during scan setup ( Detailed and formal, but includes concre 2026-08-22
pr 0.24 Add CORS misconfiguration skill (vulnerabilities) Structured technical explanation is spec 2026-07-01
pr 0.22 Migrate task runner from Makefile to mise Polished technical summary, but no clear 2026-06-19
pr 0.22 test: add unit tests for llm/utils module Polished PR prose, but specific tests an 2025-12-05
pr 0.20 # feat: add an agent-native Strix skill and MCP runtime (pro Highly polished architecture summary, th 2026-07-06
pr 0.20 test: cover report helpers _parse_dedupe_response and litell Thorough technical test description, but 2026-06-26
pr 0.18 fix(interface): correct copy-diff classification and workspa Specific implementation details and vali 2026-06-26
pr 0.16 fix: update vulnerable dependencies Highly polished and exhaustive, but grou 2026-05-07
pr 0.16 fix(core): return True when image-strip retry succeeds in st Concrete failure analysis and test evide 2026-06-26
pr 0.15 Fix Bedrock/Claude startup crash from forced parallel_tool_c Detailed and polished, but grounded in s 2026-07-03
pr 0.14 fix: declare socksio and guard tracing init against SOCKS-pr Detailed reproduction steps and dependen 2026-06-26
pr 0.14 fix(interface): exit cleanly on unhandled LLM BadRequestErro Specific error-handling details and conc 2026-06-26
pr 0.13 Fix Bedrock reasoning for adaptive-thinking models (Claude O Specific LiteLLM and Bedrock behavior in 2026-06-09
pr 0.12 fix(report): raise RuntimeError on non-object run.json (fixe Detailed technical summary is consistent 2026-08-18
pr 0.12 [codex] clarify Vertex AI env vars Brief, repository-specific documentation 2026-05-21
pr 0.12 fix(interface): drop dead reasoning-effort branches, fix sta Specific code references, test details, 2026-06-26
pr 0.12 fix(bedrock): give Claude an explicit, clamped output ceilin Very polished but contains detailed prov 2026-07-02
pr 0.12 fix(proxy): recompute Content-Length when repeat_request rep Detailed but highly specific bug report 2026-06-29
pr 0.10 feat(mcp): add scan-scoped MCP tool support Highly domain-specific, concise details 2026-08-19
pr 0.10 Recompute Content-Length when repeat_request replaces body Strongly specific bug mechanics, tests, 2026-07-01
pr 0.09 Add custom headers from the env var LLM_EXTRA_HEADERS Detailed code-path references and issue- 2026-05-05
pr 0.08 fix(tui): use single space after ordered-list marker Specific implementation details and test 2026-08-10
pr 0.08 Feat/secure credentials Specific implementation details and doma 2026-06-09
pr 0.08 fix: prevent premature subagent termination, add attack plan Detailed, domain-specific debugging note 2026-07-06
pr 0.08 fix(core): ensure tool_choice maps to structured object for Brief, technically focused description w 2026-07-04
pr 0.08 fix: skip Unix permission test on Windows (#648) Specific, concise technical details and 2026-07-03
pr 0.08 fix: serialize vulnerability dedup check-then-write with an Specific concurrency investigation and c 2026-07-02
pr 0.08 feat: add support for setup script execution before scans Concise, domain-specific CLI description 2026-07-01
pr 0.07 Add advanced security skills Long but domain-specific rationale and v 2026-08-12
pr 0.07 Add Podman as working runtime backend Concrete Podman behavior, platform detai 2026-05-28
pr 0.07 expand docs folder README for contributors Concrete documentation tasks and command 2026-07-02
pr 0.06 fix: apply assistant-prefill guard to Anthropic models in in Specific API behavior, commit reference, 2026-04-28
pr 0.06 fix: persist scan data on exit and save partial reports Detailed code references and concrete fa 2026-04-24
pr 0.06 fix(telemetry): stop finding() telemetry from blocking the a Domain-specific debugging details and te 2026-07-04
pr 0.05 fix(proxy): preserve existing query params when replaying re Terse, precise bug description with stro 2026-07-04
pr 0.05 fix: resolve workspace materialization race on Windows (#671 Specific Windows failure details, implem 2026-07-05
pr 0.05 test: add skills catalog loading and validation tests Template sections contain concise, repos 2026-07-04
pr 0.04 fix(proxy): normalize optional Caido GraphQL arguments Technical PR description with concrete b 2026-08-21
pr 0.04 Dane/strix resumable execution Informal wording and an explicit note ab 2025-11-20
pr 0.04 fix: execute tool calls emitted as plain text in interactive Specific issue references, code paths, a 2026-07-04
pr 0.04 Add semantic browser and Electron security skills Template-like structure with concrete se 2026-08-19
pr 0.04 Add Hurl and Hypothesis security playbooks Concise, domain-specific summary consist 2026-08-19
pr 0.04 Add ecosystem supply-chain security skills Template sections and precise security t 2026-08-19
pr 0.04 Fix memory compressor timeout fallback Concise, issue-specific summary with pra 2026-05-26
pr 0.04 Add Express.js and WebSocket security skills Specific security skill topics and issue 2026-07-03
commit 0.03 fix(tui): preserve cost when state is truncated (#1086) Terse technical commit with a normal co- 2026-08-20
pr 0.03 fix(report): propagate artifact write errors in finish_scan Detailed domain-specific failure analysi 2026-08-18
pr 0.03 fix(config): preserve stored config keys not present in env Precise reproduction steps and implement 2026-08-20
pr 0.03 Expose viewer host option Specific technical scope and test comman 2026-08-19
pr 0.03 Add reverse-engineering security skills Specific tools, workflow status, and val 2026-08-18
pr 0.03 Add argument injection security skill Terse technical bullets and repository-s 2026-08-19
pr 0.03 Add Azure and Entra security skill Brief template-filled summary with concr 2026-08-19
pr 0.03 feat: add file-based config and web api workflow Only a terse feature title is provided, 2026-03-25
pr 0.03 feat: dynamic skill loading tools Informal wording, lowercase phrasing, an 2026-03-05
pr 0.03 Implement architectural upgrades for advanced red-teaming Concise technical change list with no no 2025-12-01
pr 0.03 fix(tui): remove double space after numbered-list marker Precise code-level explanation with conc 2026-07-04
pr 0.03 fix(todo): stop json.loads corrupting bare numeric-looking t Detailed reproduction behavior, test evi 2026-07-03
pr 0.03 fix(report): keep ReDoS distinct from generic DoS in SARIF c Deeply specific SARIF fingerprint analys 2026-07-03
pr 0.03 Add non-mutating quality check target Brief, practical wording and environment 2026-07-03
pr 0.03 feat: implement retry logic for restartable stream errors in Informal wording and personal uncertaint 2026-07-01
commit 0.02 fix(report): raise RuntimeError on non-object run.json (fixe Terse conventional commit message with s 2026-08-20
commit 0.02 fix(tui): use single space after ordered-list marker (#1043) Brief conventional commit subject with n 2026-08-20
commit 0.02 feat: place caller-provided files into the sandbox workspace Terse, domain-specific changelog bullets 2026-08-14
pr 0.02 better skills Minimal title provides no evidence of AI 2026-08-20
pr 0.02 fix(tui): preserve cost when state is truncated Specific technical details and concise c 2026-08-15
pr 0.02 fix(llm): retry intermittent OpenRouter prompt rejections Detailed but highly specific technical n 2026-08-19
pr 0.02 Add Codex OAuth provider Truncated and informal content lacks typ 2026-05-12
pr 0.02 Feat: add traces in posthog + support for 2 accounts Informal lowercase prose, abbreviations, 2026-01-18
pr 0.02 feat: Firecrawl web search integration Contains informal wording, typos, and ca 2025-12-30
pr 0.02 FIX Strix fails to connect to Docker on macOS Extremely terse, specific commit message 2025-12-06
pr 0.02 Add proxy support for corporate networks Brief release-style description with con 2025-11-06
pr 0.02 fix: join root task sections with newlines Specific one-line fix and test commands 2026-07-04
pr 0.02 fix(tests): skip symlink test gracefully when creation is un Concise platform-specific fix with a con 2026-07-03
pr 0.02 feat: add Docker network support for sandbox connections Short, direct feature description with c 2026-07-01
commit 0.01 feat(skills): cover OWASP LLM Top 10 2026 (#1115) Conventional commit format and issue ref 2026-08-18
commit 0.01 handle resume tokens gracefully (#1097) Terse, issue-specific commit message wit 2026-08-17
pr 0.01 allow updating of vulnerability reports Minimal issue title, likely template-der 2026-08-19
pr 0.01 fix: better whitebox wiki Very terse informal title with no meanin 2026-03-31
commit 0.00 perf: bootstrap Caido concurrently with the scan start (#114 — 2026-08-21
commit 0.00 perf: take heavy imports off the startup path and pre-warm t — 2026-08-21
commit 0.00 docs(skills): correct gRPC guidance, a .proto is not a spec Terse, domain-specific commit message wi 2026-08-20
commit 0.00 docs(skills): document --workspace-file for supporting files Concise technical commit message using s 2026-08-20
commit 0.00 docs(skills): fix nonexistent --mount flag, document real ta Detailed but concrete changelog with rep 2026-08-20
commit 0.00 docs(skills): use current OWASP editions (Top 10:2025, API T Brief, domain-specific commit message na 2026-08-14
commit 0.00 fix(skills): avoid unquoted colon in api-security-testing de Terse corrective commit message with spe 2026-08-14
commit 0.00 feat(skills): add target-specific security testing skills (w Concise feature commit message with spec 2026-08-14
commit 0.00 Drop strict tool schemas on Claude routes Short, domain-specific commit subject wi 2026-08-20
commit 0.00 Require viewer session for run data Terse, domain-specific commit title with 2026-08-19
commit 0.00 Expose viewer host option Concise technical title; no indicators o 2026-08-19
commit 0.00 Add semantic browser and Electron security skills Short security-focused commit title usin 2026-08-19
commit 0.00 Add HTTP differential testing tools Brief, domain-specific title with natura 2026-08-19
commit 0.00 Add ecosystem supply-chain security skills Concise technical wording and repository 2026-08-19
commit 0.00 Add argument injection security skill Short security commit title with no gene 2026-08-19
commit 0.00 Add Azure and Entra security skill Specific product and security terminolog 2026-08-19
commit 0.00 feat(reporting): require contextual CVSS and usage evidence Conventional commit title with specific 2026-08-17
commit 0.00 cli: render contextual CVSS vector, advisory score, and reas Concise technical commit message using d 2026-08-17
commit 0.00 Contextual CVSS as a full 8-metric breakdown, computed like Short, domain-specific commit message wi 2026-08-17
commit 0.00 reporting: require the source-to-sink trace in reachability Terse reporting change with specific rea 2026-08-17
commit 0.00 reporting: surface contextual CVSS in the markdown report; r Concise technical commit message with re 2026-08-17
commit 0.00 reporting: drop per-metric contextual CVSS reasoning, keep t Brief, informal technical commit message 2026-08-17
commit 0.00 feat(reporting): contextual CVSS environmental metrics on de Conventional commit title with specific 2026-08-17
commit 0.00 Fix LiteLLM cost model resolution Terse, conventional fix title with no AI 2026-08-11
commit 0.00 chore: release v1.5.3 Pure changelog format; domain-specific, 2026-08-10
commit 0.00 fix(llm): send OpenRouter app attribution on the request its — 2026-08-10
commit 0.00 fix(container): write the browser profile as root Terse commit style with domain context, 2026-08-10
commit 0.00 chore(container): drop explanatory comment Brief changelog; domain content, minimal 2026-08-10
commit 0.00 fix(container): keep the browser env alive where image ENV i Changelog term, terse and domain-specifi 2026-08-10
commit 0.00 fix(container): reclaim abandoned browser sessions (#1034) — 2026-08-09
commit 0.00 chore: drop explanatory comment Short, terse commit message with no AI t 2026-08-09
commit 0.00 fix(llm): omit parallel_tool_calls on tool-less requests Technical shorthand and precise fix, no 2026-08-09
commit 0.00 chore: release v1.5.2 Standard version bump commit, no AI sign 2026-08-09
commit 0.00 fix(runner): settle child agents before closing sessions at Technical, domain-specific, human commit 2026-08-09
commit 0.00 fix(tools): coerce an empty-string list/dict argument to an Concise fix description, technical, no A 2026-08-08
commit 0.00 fix(runner): resume after a user interrupt instead of failin Direct technical phrasing, no AI traits 2026-08-08
commit 0.00 fix(sessions): open a sqlite connection per operation, not p Clear fix and technical jargon, human-wr 2026-08-08
commit 0.00 fix(todo): stop a todo plan failing on priority or duplicate Brief, domain-typical commit message; no 2026-08-08
commit 0.00 docs(skills): rename skills to descriptive names and broaden Standard commit style; changelog format, 2026-08-07
commit 0.00 chore: release v1.5.1 Standard release note, terse and typical 2026-08-07
commit 0.00 fix(tui): scrollbar visibility, findings scrolling, and repo Brief, technical summary; clear domain e 2026-08-07
commit 0.00 expand firebase storage rules coverage (#1002) Short, domain-specific phrase, typical o 2026-08-07
commit 0.00 ci: publish nested standalone archives as release assets Technical jargon, terse and domain-speci 2026-08-06
commit 0.00 ci: tolerate repr-escaped backslashes in the release TUI-sid Terse, uses context-specific terms, not 2026-08-06
commit 0.00 ci: match Windows backslash paths in the release TUI-sidecar Short, technical, no AI indicators prese 2026-08-06
commit 0.00 chore(image): bump sandbox tag 1.2.0 -> 1.3.0 Jargon and terse git commit format, clea 2026-08-06
commit 0.00 chore: release v1.5.0 Standard brief version bump commit, typi 2026-08-06
commit 0.00 docs(skills): skipped symbol search must be disclosed in rea Technical, concise, no AI phrasing or st 2026-08-06
commit 0.00 docs(skills): require per-CVE affected-symbol matching in de Jargon, terse style, typical of human te 2026-08-06
commit 0.00 feat: agent-ready — installable SKILL.md skills, AGENTS.md, Uses abbreviations and commit convention 2026-08-06
commit 0.00 update readme Very terse, typical human commit message 2026-08-06
commit 0.00 prompt changes Minimal, lacks AI indicators, common hum 2026-08-06
commit 0.00 prompt changes Terse and informal; clearly human shorth 2026-08-06
commit 0.00 feat(report): keep dependency findings from distinct manifes Concise technical commit; uses domain-sp 2026-08-05
commit 0.00 feat(reporting): require repo-relative manifest_path on depe Brief, domain-specific; no AI phrasing. 2026-08-05
commit 0.00 feat(reporting): structured reachability evidence ladder for Commit message follows conventional styl 2026-08-05
commit 0.00 fix(agents): collapse repeated waits queued inside one model — 2026-08-05
commit 0.00 fix(llm): abandon a model stream that stops producing events — 2026-08-05
commit 0.00 fix(llm): cap the tool calls one assistant response may queu — 2026-08-05
commit 0.00 fix(llm): keep tool-call ids unique so a recycled id can't e — 2026-08-05
commit 0.00 feat(reporting): record transitive dependency chain on SCA f — 2026-08-04
commit 0.00 fix(tui): keep a long error inside the status row (#970) Brief commit message; concise, domain-sp 2026-08-04
commit 0.00 feat: support API specs and Postman collections as targets ( Standard feature commit message with no 2026-08-04
commit 0.00 build: add types-requests to dev deps Contains typos and domain-specific expla 2026-08-04
commit 0.00 fix(core): settle a non-interactive agent's status before it Detailed technical explanation, uses dom 2026-08-04
commit 0.00 fix(core): recover from hallucinated tool names instead of e Contains domain jargon, abbreviations, a 2026-08-04
commit 0.00 fix(tui): drop the shift+enter newline hint from the setup f Concise description, no AI hallmarks. 2026-08-04
commit 0.00 Create credential files with owner-only permissions (#945) Standard commit, contains human co-autho 2026-08-04
commit 0.00 feat(tui): replace Textual with a Go/Bubble Tea interface (# Brief, technical commit message, no AI h 2026-08-04
commit 0.00 fix: calibrate vulnerability severity to demonstrated impact Terse commit message using domain langua 2026-08-03
commit 0.00 feat(runtime): mount local targets instead of copying them i — 2026-08-02
commit 0.00 fix(tools): tell a waiting parent when stop_agent stops its Terse commit message, technical and succ 2026-08-02
commit 0.00 fix(core): wake the parent when a child ends without a compl Brief, specific, and contains domain con 2026-08-02
commit 0.00 perf(cli): ~10x faster startup via lazy imports (#920) — 2026-08-02
commit 0.00 fix(tools): accept both the string and structured form of ev — 2026-08-02
commit 0.00 feat(config): accept STRIX_REASONING_EFFORT=max for provider — 2026-08-02
commit 0.00 docs(llm-providers): explain the structured tool_calls requi — 2026-08-01
commit 0.00 docs(prompts): text-only turns no longer end an autonomous r Short, domain-specific, no AI tone detec 2026-08-01
commit 0.00 refactor(tools): split wait_for_message into respond_to_user Explanatory but uses informal language a 2026-08-01
commit 0.00 docs(core): correct the rationale for notifying a stalled ch Concise correction with domain-specific 2026-08-01
commit 0.00 fix(core): tell the parent when an interactive subagent park Technical explanation, brief, no AI indi 2026-08-01
commit 0.00 fix(tools): halve the wait_for_message ceiling to 300s Direct, technical, and contains informal 2026-08-01
commit 0.00 fix(core): persist the tool-call recovery counter across res Technical, domain-specific language, no 2026-08-01
commit 0.00 fix(core): stop interactive runs stalling on a missing tool Technical, informal and succinct style. 2026-08-01
commit 0.00 docs(prompt): teach agents to recognize Caido proxy error pa — 2026-08-01
commit 0.00 fix: pre-v1-style lifecycle resilience — mailbox delivery, u — 2026-08-01
commit 0.00 fix(llm): surface structured provider refusals (#944) Commit message is terse and domain-speci 2026-07-31
commit 0.00 fix(llm): avoid auth during ChatGPT lookup Terse commit and technical explanation, 2026-07-30
commit 0.00 test(llm): cover the full run loop against a non-streaming g Commit message uses domain jargon and te 2026-07-30
commit 0.00 feat(llm): opt-in LLM_DISABLE_STREAMING for non-streaming Op Commit message is concise, uses domain-s 2026-07-30
commit 0.00 fix(llm): pass LLM_EXTRA_HEADERS through ModelSettings so th — 2026-07-30
pr 0.00 perf: bootstrap Caido concurrently with the scan start — 2026-08-21
pr 0.00 perf: take heavy imports off the startup path and pre-warm t — 2026-08-21
pr 0.00 Drop strict tool schemas on Claude routes — 2026-08-20
pr 0.00 fix: preserve persisted config environment Extremely terse issue reference with no 2026-08-20
pr 0.00 Testing Empty description provides no evidence o 2026-06-06