Is the XSS scanner safe for my production environment?

The skill performs static and logic analysis of your code and suggests safe proof-of-concept payloads; it is intended for use during development and auditing phases.

Does this skill detect all types of XSS?

Yes, it is designed to identify the three primary types of Cross-Site Scripting: reflected, stored, and DOM-based XSS.

What languages and contexts are supported?

The scanner analyzes HTML, JavaScript, CSS, and URL contexts to find potential exploit vectors in web applications.

How do I start an XSS scan using this skill?

You can trigger the scan by using the shortcut command '/xss' or by asking Claude to 'scan for XSS vulnerabilities' in your current project or a specific file.

Does it provide fixes for the vulnerabilities it finds?

Yes, it generates a report highlighting the vulnerable code and suggests specific remediation steps, such as using sanitization libraries like sanitizeHtml.

XSS Vulnerability Scanner

Name: XSS Vulnerability Scanner
Author: jeremylongshore

byjeremylongshore

•

883

•

Seguridad y Pruebas

Scans and identifies reflected, stored, and DOM-based XSS vulnerabilities across HTML, JavaScript, and CSS codebases.

This skill empowers Claude to proactively detect Cross-Site Scripting (XSS) vulnerabilities within your codebase by performing context-aware analysis and WAF bypass testing. Ideal for security audits and pre-deployment reviews, it identifies risky injection points in web components, search functionalities, and form submissions, providing actionable remediation guidance and sanitization strategies to ensure your applications remain resilient against common attack vectors.

Características Principales

01Generates safe proof-of-concept payloads for vulnerability verification

02883 GitHub stars

03Detects reflected, stored, and DOM-based XSS vulnerabilities

04Provides detailed remediation reports with specific sanitization fixes

05Supports shortcut commands like /xss for rapid security audits

06Analyzes code context across HTML, JavaScript, CSS, and URLs

Casos de Uso

01Conducting automated security audits during the code review process

02Identifying unsanitized user inputs in search bars and comment forms

03Testing the effectiveness of Content Security Policies (CSP) against bypasses

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills xss-vulnerability-scanner

For use in Claude.ai and ChatGPT

Download Skill

Características Principales

01Generates safe proof-of-concept payloads for vulnerability verification

02883 GitHub stars

03Detects reflected, stored, and DOM-based XSS vulnerabilities

04Provides detailed remediation reports with specific sanitization fixes

05Supports shortcut commands like /xss for rapid security audits

06Analyzes code context across HTML, JavaScript, CSS, and URLs

Casos de Uso

01Conducting automated security audits during the code review process

02Identifying unsanitized user inputs in search bars and comment forms

03Testing the effectiveness of Content Security Policies (CSP) against bypasses

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills xss-vulnerability-scanner

For use in Claude.ai and ChatGPT

Download Skill