Does this skill provide code fixes for security issues?

Yes, once a vulnerability is detected, the skill provides detailed remediation steps, including suggested code snippets for proper input sanitization and escaping.

How do I trigger an XSS scan using this skill?

You can initiate a scan by using the shortcut command '/xss' or by asking Claude natural language questions like 'check for XSS vulnerabilities' in a specific file or feature.

What types of XSS does the scanner identify?

The skill identifies three primary types: Reflected XSS (input echoed back immediately), Stored XSS (malicious scripts saved to a database), and DOM-based XSS (vulnerabilities in client-side script processing).

Can it help with Content Security Policy (CSP)?

Absolutely. It can analyze your code to test the effectiveness of your current CSP and suggest improvements to further mitigate the impact of potential XSS attacks.

XSS Vulnerability Scanner

Name: XSS Vulnerability Scanner
Author: jeremylongshore

byjeremylongshore

•

883

•

Security & Testing

Scans web application source code to detect and remediate reflected, stored, and DOM-based Cross-Site Scripting vulnerabilities.

The XSS Vulnerability Scanner skill provides Claude with advanced security auditing capabilities to proactively identify Cross-Site Scripting risks within your codebase. By performing context-aware analysis across HTML, JavaScript, CSS, and URL parameters, it pinpoints where unsanitized user input could lead to malicious script execution. The skill not only identifies vulnerabilities but also provides actionable remediation advice, such as sanitization library recommendations and Content Security Policy (CSP) configurations, ensuring your web applications are hardened against common attack vectors before they reach production.

Key Features

01883 GitHub stars

02Quick activation via the /xss shortcut or natural language triggers

03Context-aware analysis of HTML, JavaScript, CSS, and URL contexts

04Automated proof-of-concept payload generation for verification

05Detection of Reflected, Stored, and DOM-based XSS vulnerabilities

06Specific remediation guidance and code sanitization patterns

Use Cases

01Testing the resilience of Content Security Policies against bypass techniques

02Conducting automated security audits during the development lifecycle

03Reviewing search functionality and form submissions for injection risks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills skill-adapter

For use in Claude.ai and ChatGPT

Download Skill