How do I start a security scan using this skill?

You can trigger a scan by typing the shortcut /xss or by asking Claude to 'check for XSS vulnerabilities' in a specific file or feature.

Which file types does the scanner analyze?

The scanner analyzes HTML, JavaScript, CSS, and backend files that handle URL parameters and user-generated content.

What types of XSS vulnerabilities can this skill identify?

This skill identifies the three primary types of XSS: Reflected, Stored, and DOM-based vulnerabilities by analyzing your application's data flow.

Does it provide code fixes for the vulnerabilities it finds?

Yes, it reports the specific location of the vulnerability and provides a suggested fix, such as implementing proper escaping or using a sanitization library.

XSS Vulnerability Scanner

Name: XSS Vulnerability Scanner
Author: intent-solutions-io

byintent-solutions-io

安全与测试

Scans web applications for Cross-Site Scripting vulnerabilities and provides context-aware remediation guidance.

关于

The XSS Vulnerability Scanner skill empowers Claude to act as a proactive security auditor, identifying reflected, stored, and DOM-based XSS vulnerabilities within your codebase. By analyzing HTML, JavaScript, CSS, and URL contexts, it detects potential exploits and suggests safe proof-of-concept payloads to verify risks. This skill is essential for developers performing security audits, reviewing code for sanitization issues, and ensuring web applications are resilient against common attack vectors before deployment.

主要功能

Supports quick activation via the /xss command or natural language
Generates safe proof-of-concept (PoC) payloads for verification
0 GitHub stars
Detects reflected, stored, and DOM-based XSS vulnerabilities
Analyzes multiple contexts including HTML, JS, CSS, and URLs
Provides actionable remediation steps and sanitization library suggestions

使用场景

Validating the effectiveness of Content Security Policies (CSP)
Performing automated security audits during the code review process
Testing form submissions and search inputs for unsanitized data handling

关于

主要功能

Supports quick activation via the /xss command or natural language
Generates safe proof-of-concept (PoC) payloads for verification
0 GitHub stars
Detects reflected, stored, and DOM-based XSS vulnerabilities
Analyzes multiple contexts including HTML, JS, CSS, and URLs
Provides actionable remediation steps and sanitization library suggestions

使用场景

Validating the effectiveness of Content Security Policies (CSP)
Performing automated security audits during the code review process
Testing form submissions and search inputs for unsanitized data handling