workflowstacks
devtools

xalgorix

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
1,223 stars+17★ this week236 forksGoUpdated 10/22/2026100% free · open source
What it does

Runs autonomous AI‑driven pentesting agents that continuously scan, discover vulnerabilities, and orchestrate exploits against a target web application.

When to use it
  • •You need a quick, repeatable security assessment of a new SaaS product before launch.
  • •You want continuous monitoring for newly introduced bugs after each deployment.
  • •You lack in‑house security expertise but need to validate OWASP Top 10 coverage.
Ready-to-paste prompt
xalgorix run -c <(printf "target: https://api.myapp.com\nmode: full\nconcurrency: 8\noutput: scan-report.json")
Heads up: The first run fails if `OPENAI_API_KEY` is not set or if you are using Go < 1.22 – both are mandatory for the AI‑driven modules.
Saves to your device
Use with Claude
New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

✅ Light setup

Installs with a command or two; your AI agent can do it for you.

Try it instantly — no install
Claude Code
mkdir -p ~/.claude/skills/xalgorix && curl -fsSL https://workflowstacks.com/api/skills/xalgorix/claude-skill -o ~/.claude/skills/xalgorix/SKILL.md
Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)
claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

How xalgorix works
Codeflow
Free to inspect

Xalgorix is a very large Go project (~162k lines across 517 code files). Setup is light: installs like a normal app. Reading the code is optional. Last commit this month, Apache-2.0 license, has a test suite.

Size
Very large codebase
~162k lines · 517 code files · days to read — use, don't read
Setup
One-command install
Installs like a normal app. Reading the code is optional.
Runs on
Go · Docker
No API keys detected
Go 89%TypeScript 9%JavaScript 1%
Where to start reading
  1. 1
    README.md
    Start here — what it does and how to install it
  2. 2
    cmd/xalgorix/main.go
    Where the program starts running
  3. 3
    go.mod
    Dependencies and the commands it exposes
  4. 4
    internal/tools/skills/data/README.md
    Inside internal/ — the main logic begins here
What's in each folder
internal/Core code — the actual logic1313 files
cmd/Command-line entry points5 files
docs/Documentation6 files
webui/Folder79 files
deploy/Deployment / infrastructure14 files
scripts/Helper scripts1 files
tools/Helper scripts1 files
assets/Images & static assets13 files
READMEHas testsDocumentedCI checksDocker readyApache-2.0 licenseUpdated this month
Quick Actions
Details
Creator
xalgorix
Language
Go
Category
devtools
Published
3/13/2026

Are you the creator of this tool? and earn 85% of every sale.

Show it off in your README:

Featured on WorkflowStacks
[![Featured on WorkflowStacks](https://workflowstacks.com/api/badge/xalgorix.svg)](https://workflowstacks.com/skills/xalgorix?utm_source=github&utm_medium=badge)
🔥 Hot this week, in your inbox
Skills like this, every Monday.

The five fastest-growing open-source AI skills, ranked by GitHub star growth. One email a week, unsubscribe anytime.

Do this with a working workflow

Pages we wrote and tested that put a skill like this to work — importable n8n templates, outcome guides and Claude Desktop configs.

MCP config

Playwright (browser) MCP config

Drive a real browser for testing and automation from Claude.

Related skills

More devtools tools founders pair with this one.

devtools★ 194,091
firecrawl – Scalable Web Scraping and Search API for Founders
Use firecrawl to quickly search, scrape, and interact with web data at any scale. Ideal for founders building AI agents, data pipelines, or content tools. 190k+ GitHub stars.
devtools★ 118,865
browser-use: Automate Web Tasks
Founders use browser-use to automate online tasks with ease, ideal for startups needing AI-powered browser automation.
devtools★ 98,270
Playwright: Unified Cross‑Browser Testing for Faster Releases
Accelerate QA with Playwright’s single API that covers Chromium, Firefox and WebKit—perfect for founders building reliable web apps. 97k+ GitHub stars.
devtools★ 1,531
akto
Akto is the fastest growing AI Security platform for your teams to secure AI agents, MCPs, LLMs, Agent skills, Gen AI apps in your organization.
devtools★ 11,960
robotframework
Generic automation framework for acceptance testing and RPA
devtools★ 29,945
Kestra: Seamless Event‑Driven Orchestration for Mission‑Critical Apps
Scale your startup’s data pipelines and automated workflows with Kestra’s high‑availability Java platform—ideal for founders building reliable, low‑code orchestration. Backed by 29k+ GitHub stars.