Is the XSS scanner safe for my production environment?

The skill performs static and logic analysis of your code and suggests safe proof-of-concept payloads; it is intended for use during development and auditing phases.

Does this skill detect all types of XSS?

Yes, it is designed to identify the three primary types of Cross-Site Scripting: reflected, stored, and DOM-based XSS.

What languages and contexts are supported?

The scanner analyzes HTML, JavaScript, CSS, and URL contexts to find potential exploit vectors in web applications.

How do I start an XSS scan using this skill?

You can trigger the scan by using the shortcut command '/xss' or by asking Claude to 'scan for XSS vulnerabilities' in your current project or a specific file.

Does it provide fixes for the vulnerabilities it finds?

Yes, it generates a report highlighting the vulnerable code and suggests specific remediation steps, such as using sanitization libraries like sanitizeHtml.

XSS Vulnerability Scanner

Name: XSS Vulnerability Scanner
Author: jeremylongshore

byjeremylongshore

•

883

Security & Testing

Scans and identifies reflected, stored, and DOM-based XSS vulnerabilities across HTML, JavaScript, and CSS codebases.

About

This skill empowers Claude to proactively detect Cross-Site Scripting (XSS) vulnerabilities within your codebase by performing context-aware analysis and WAF bypass testing. Ideal for security audits and pre-deployment reviews, it identifies risky injection points in web components, search functionalities, and form submissions, providing actionable remediation guidance and sanitization strategies to ensure your applications remain resilient against common attack vectors.

Key Features

Generates safe proof-of-concept payloads for vulnerability verification
883 GitHub stars
Detects reflected, stored, and DOM-based XSS vulnerabilities
Provides detailed remediation reports with specific sanitization fixes
Supports shortcut commands like /xss for rapid security audits
Analyzes code context across HTML, JavaScript, CSS, and URLs

Use Cases

Conducting automated security audits during the code review process
Identifying unsanitized user inputs in search bars and comment forms
Testing the effectiveness of Content Security Policies (CSP) against bypasses

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills xss-vulnerability-scanner

For use in Claude.ai and ChatGPT

Download Skill

GitHub