Does it provide remediation suggestions?

Yes, once a vulnerability is identified, the skill provides the exact location in the code and suggests specific fixes, such as using sanitization libraries like sanitizeHtml.

What specific types of XSS does this skill detect?

The scanner identifies reflected XSS, stored (persistent) XSS, and DOM-based XSS by analyzing how data flows through your application contexts.

How do I trigger an XSS scan in Claude Code?

You can activate the skill by using the shortcut command '/xss' or by asking Claude to 'scan for XSS vulnerabilities' in your project files.

Which file types can the scanner analyze?

The skill is designed to analyze web-related files including HTML, JavaScript (including frameworks), CSS, and URL routing configurations.

Can this skill help with security compliance?

Absolutely. It helps developers adhere to security best practices and standards by identifying common vulnerabilities before they reach production environments.

XSS Vulnerability Scanner

Name: XSS Vulnerability Scanner
Author: jeremylongshore

byjeremylongshore

•

884

セキュリティとテスト

Identifies and remediates reflected, stored, and DOM-based cross-site scripting (XSS) vulnerabilities across web application codebases.

概要

The XSS Vulnerability Scanner skill empowers Claude to proactively detect security flaws within your HTML, JavaScript, CSS, and URL contexts. By leveraging context-aware analysis and WAF bypass testing, it identifies potential exploit vectors and suggests safe proof-of-concept payloads to validate risks. This skill is essential for developers and security auditors looking to automate vulnerability discovery during code reviews or before deploying web applications to production, ensuring resilience against common web-based attack vectors.

主な機能

Detects reflected, stored, and DOM-based XSS vulnerabilities
Provides detailed remediation guidance and safe proof-of-concept payloads
Analyzes HTML, JavaScript, CSS, and URL parameters for context-aware risks
Triggers instantly via '/xss' shortcut or natural language requests
884 GitHub stars
Includes bypass testing logic for Web Application Firewalls (WAF)

ユースケース

Validating the effectiveness of existing Content Security Policies (CSP)
Reviewing code during the PR process to ensure proper input sanitization
Performing comprehensive security audits of web forms and search functionalities

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills xss-vulnerability-scanner

For use in Claude.ai and ChatGPT

Download Skill

GitHub

概要