common-appsec-patterns

XSS vulnerability testing can be automated to systematically identify reflected, stored, and DOM-based Cross-Site Scripting across modern frameworks and contexts. This Skill coordinates specialized agents to detect these vulnerabilities comprehensively, covering various injection points and bypass techniques without manual repetition.

Yes, this Skill applies to REST and GraphQL APIs alongside single-page applications and rich text platforms. It orchestrates agents to validate common web application vulnerabilities including injection flaws, authentication issues, CSRF, and other OWASP Top 10 patterns across these architectures.

Client-side security assessment covers vulnerabilities specific to modern web applications, including framework-specific issues, defense bypasses, and context-dependent XSS vectors. Automated testing ensures thorough coverage of DOM manipulation, event handlers, and third-party script interactions.

Deploy this Skill as an automated scanner in your CI/CD pipeline to test code deployments before production. It identifies common client-side vulnerabilities early, reducing manual security review overhead and catching issues that would otherwise reach live environments.

The Skill requires specialized agents located in the .claude/agents directory and coordinates their parallel execution for comprehensive scope. Outputs organize per-agent and per-target results in the outputs/ directory, ensuring structured vulnerability assessment across your application targets.