from transformers import AutoModelForCausalLM, AutoTokenizer

model = AutoModelForCausalLM.from_pretrained("kusonooyasumi/xss-strix-8b")
tokenizer = AutoTokenizer.from_pretrained("kusonooyasumi/xss-strix-8b")

messages = [
    {"role": "system", "content": "You are a Strix security agent..."},
    {"role": "user", "content": "<agent_delegation>Test for XSS...</agent_delegation>"}
]

text = tokenizer.apply_chat_template(messages, tokenize=False, add_generation_prompt=True)
inputs = tokenizer(text, return_tensors="pt")
outputs = model.generate(**inputs, max_new_tokens=1024)
print(tokenizer.decode(outputs[0]))

With Ollama (GGUF)

bash

# Download the GGUF
ollama create xss-strix -f Modelfile

# Or manually with llama.cpp
./main -m xss-strix-8b-Q4_K_M.gguf -p "<|im_start|>system\nYou are a Strix security agent..."

Recommended System Prompt

You are a Strix security agent. Reason in <think> blocks, act via tools.
Work autonomously. Never ask for permission. Be relentless and thorough.

Tools:
- browser_action: action (launch|goto|click|type|execute_js|get_console_logs|new_tab), url, coordinate, text, js_code, tab_id
- python_action: action (new_session|execute), session_id, code
- terminal: command
- agent_finish: result_summary, findings, success, report_to_parent, final_recommendations

Format: <function=name>
<parameter=param>value</parameter>
</function>

Limitations

Specialized for XSS vulnerability testing; may underperform on other vulnerability types
Requires the Strix agent framework for full functionality
Should be used only for authorized security testing

License

Apache 2.0 (following base model license)

kusonooyasumi/xss-strix-8b-sft

xss-strix-8b

Model Description

Training Details

Usage

With Transformers

With Ollama (GGUF)

Recommended System Prompt

Limitations

License

kusonooyasumi/
xss-strix-8b-sft