7 commits

Author	SHA1	Message	Date
alex s	42baa7c09e	skills: point to the strix cloud CLI in every skill (#1227)	2026-09-01 18:12:29 -04:00
Alex Schapiro	2cc8167814	docs(skills): correct gRPC guidance, a .proto is not a spec target	2026-08-20 19:27:04 -04:00
Alex Schapiro	d6a3ca7e58	docs(skills): document --workspace-file for supporting files	2026-08-20 19:27:04 -04:00
Alex Schapiro	9099710cef	docs(skills): fix nonexistent --mount flag, document real targeting flags, add application-security-testing skill ... - Remove --mount from two skills: the flag does not exist in the CLI. Local paths are mounted writable when passed with -t. - Document --target-list, --scope-mode, --diff-base, and OpenAPI/Postman targets, so agents stop putting spec URLs in --instruction prose. - Add the application-security-testing skill as the entry point for whole-product AppSec requests, routing each asset to the right workflow. - Drop contractions and Latin abbreviations across the skill prose.	2026-08-20 19:27:04 -04:00
Alex Schapiro	634cb98241	docs(skills): use current OWASP editions (Top 10:2025, API Top 10 2023)	2026-08-20 19:27:04 -04:00
Alex Schapiro	1b36343eea	fix(skills): avoid unquoted colon in api-security-testing description	2026-08-20 19:27:04 -04:00
Alex Schapiro	b5ef93e744	feat(skills): add target-specific security testing skills (web app, API, OWASP Top 10, code review)	2026-08-20 19:27:04 -04:00