xss-testing
Provides payloads and methodologies to test for reflected, stored, and DOM-based XSS vulnerabilities.
Install
mkdir -p .claude/skills/xss-testing && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/4391" && unzip -o skill.zip -d .claude/skills/xss-testing && rm skill.zipInstalls to .claude/skills/xss-testing
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
XSS跨站脚本攻击测试的专业技能Key capabilities
- →Test for reflected, stored, and DOM-based XSS
- →Execute payloads using event handlers and pseudo-protocols
- →Perform automated scanning with dalfox
- →Verify vulnerabilities using Burp Suite and browser consoles
- →Assess impact including cookie theft and session hijacking
How it works
The skill utilizes specific payloads and scanning tools to identify and verify XSS vulnerabilities across different injection contexts.
Inputs & outputs
When to use xss-testing
- →Security auditing web forms
- →Testing input sanitization
- →Verifying XSS mitigation strategies
- →Simulating attack vectors for QA
About xss-testing
Provides methodologies and payloads for testing reflected, stored, and DOM-based XSS vulnerabilities. Includes guidance on evasion techniques and verification steps.
XSS跨站脚本攻击测试的专业技能
When not to use it
- →When testing environments lack authorization
- →When the target application is not intended for security auditing
Limitations
- →Requires manual verification of payload execution
- →Depends on the target's specific input sanitization
How it compares
It provides a structured methodology for testing and evasion that goes beyond simple manual payload injection.
Compared to similar skills
xss-testing side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| xss-testing (this skill) | 1 | 8mo | Review | Advanced |
| bun-development | 4 | 8mo | Caution | Beginner |
| e2e | 0 | 3mo | Caution | Intermediate |
| smart-contract-engineer | 0 | 8mo | Review | Advanced |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by Ed1s0nZ
View all by Ed1s0nZ →You might also like
bun-development
davila7
Modern JavaScript/TypeScript development with Bun runtime. Covers package management, bundling, testing, and migration from Node.js. Use when working with Bun, optimizing JS/TS development speed, or migrating from Node.js to Bun.
e2e
wp-media
Run E2E smoke tests (basic) or full acceptance + regression suite (extended).
smart-contract-engineer
jw3b-dev
Expert in Solidity, Foundry, EVM security. Specializes in gas optimization, upgradeable patterns, and fuzz testing.
backend-security-coder
sickn33
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
secure-workflow-guide
trailofbits
Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generates visual security diagrams, helps document security properties for fuzzing/verification, and reviews manual security areas.
audit-prep-assistant
trailofbits
Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates documentation (flowcharts, user stories, inline comments).