Audit React components for XSS vulnerabilities and generate remediation steps.
npx skills add https://github.com/Shankulkarni/vibe-audit --skill audit-react-xss
Please help me install this Agent Skill. Skill: audit-react-xss Source: https://github.com/Shankulkarni/vibe-audit/tree/main/skills/audit-react-xss Command: npx skills add https://github.com/Shankulkarni/vibe-audit --skill audit-react-xss
Audit React applications to uncover XSS vectors that AI-generated code can introduce, helping teams prevent client-side vulnerabilities before release.
Run a scan on your React project to identify XSS vectors in components and get remediation steps.
High-intent search queries and answers about installing and using this skill.
To find React XSS vulnerabilities, scan components rendering user-controlled content via dangerouslySetInnerHTML. The audit flags insecure constructs and provides concrete remediation steps to ensure no sanitization gaps remain.
Preventing href injection requires auditing unvalidated href and src attributes for URL injection vectors. The scan identifies potential DOM-based vulnerabilities and recommends applying DOMPurify sanitization to secure user-controlled inputs.
Yes, the XSS scan detects DOM-based vulnerabilities across React projects. It identifies components rendering user-controlled content through dangerous patterns and captures findings with security-focused recommendations to fix sanitization gaps.
To fix components flagged for unvalidated href attributes, apply the security-focused remediation steps provided by the audit. Recommendations include validating URL inputs and implementing DOMPurify sanitization before rendering content.
dangerouslySetInnerHTML causes XSS vulnerabilities by rendering raw user-controlled content directly into the DOM without sanitization. Scanning identifies these insecure constructs and recommends applying DOMPurify to sanitize inputs before rendering.
Yes, you can scan an entire React project for DOMPurify sanitization gaps. The audit applies checks across components to identify dangerous patterns and ensures no sanitization gaps remain before release.
ovachieverMigrate React, Vue, Angular, or vanilla frontends to Next.js with shadcn/ui.
mind-systemsAudit software projects against OWASP Top 10 security controls.
PremModhaOfficialApply frontend security patterns for token storage, input sanitization, and content rendering.
isihigameKoudaiIdentify and correct client-side SPA vulnerabilities like API key leakage and XSS.
