How do I start a security scan using this skill?

You can trigger a scan by typing the shortcut /xss or by asking Claude to 'check for XSS vulnerabilities' in a specific file or feature.

Which file types does the scanner analyze?

The scanner analyzes HTML, JavaScript, CSS, and backend files that handle URL parameters and user-generated content.

What types of XSS vulnerabilities can this skill identify?

This skill identifies the three primary types of XSS: Reflected, Stored, and DOM-based vulnerabilities by analyzing your application's data flow.

Does it provide code fixes for the vulnerabilities it finds?

Yes, it reports the specific location of the vulnerability and provides a suggested fix, such as implementing proper escaping or using a sanitization library.

XSS Vulnerability Scanner

Name: XSS Vulnerability Scanner
Author: intent-solutions-io

byintent-solutions-io

0•

セキュリティとテスト

Scans web applications for Cross-Site Scripting vulnerabilities and provides context-aware remediation guidance.

The XSS Vulnerability Scanner skill empowers Claude to act as a proactive security auditor, identifying reflected, stored, and DOM-based XSS vulnerabilities within your codebase. By analyzing HTML, JavaScript, CSS, and URL contexts, it detects potential exploits and suggests safe proof-of-concept payloads to verify risks. This skill is essential for developers performing security audits, reviewing code for sanitization issues, and ensuring web applications are resilient against common attack vectors before deployment.

主な機能

01Supports quick activation via the /xss command or natural language

02Generates safe proof-of-concept (PoC) payloads for verification

030 GitHub stars

04Detects reflected, stored, and DOM-based XSS vulnerabilities

05Analyzes multiple contexts including HTML, JS, CSS, and URLs

06Provides actionable remediation steps and sanitization library suggestions

ユースケース

01Validating the effectiveness of Content Security Policies (CSP)

02Performing automated security audits during the code review process

03Testing form submissions and search inputs for unsanitized data handling

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add intent-solutions-io/plugins-nixtla xss-vulnerability-scanner

For use in Claude.ai and ChatGPT

Download Skill