skills.rest
enderphan94
enderphan94COMMUNITY
Explore all skills by this author →
GitHub

front-end-scan

Analyze web frontend headers, scripts, and artifacts for vulnerabilities and misconfigurations.

1|Updated Mar 20, 2026
Search Tags:#frontend#javascript#XSS#CSP#web security#client-side#headers
One-click install
npx skills add https://github.com/enderphan94/pentest-kit --skill front-end-scan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: front-end-scan
Source: https://github.com/enderphan94/pentest-kit/tree/main/skills/front-end-scan
Command: npx skills add https://github.com/enderphan94/pentest-kit --skill front-end-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the need for comprehensive client-side security testing by detecting common vulnerabilities and misconfigurations in web applications' frontend components.

Core Features & Use Cases

  • Scope Analysis: Evaluates security headers, JavaScript assets, and embedded resources for vulnerabilities.
  • Vulnerability Detection: Identifies issues such as XSS reflection points, source map leaks, CSP weaknesses, and unsafe cookie attributes.
  • Use Case: Security teams can run this scan to proactively discover browser-facing flaws before deployment or after a security incident.

Quick Start

Use the front-end-scan skill to analyze the security posture of your target website by inputting the URL and following the step-by-step instructions provided.

Frequently Asked Questions about front-end-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my web application for client-side security vulnerabilities?▼

To check web application frontend security, you can use this skill to collect HTTP headers, scripts, and in-page artifacts, then analyze them for vulnerabilities like XSS reflection points and CSP weaknesses. It evaluates browser-facing flaws for security auditors and developers.

What is frontend security scanning and what misconfigurations does it detect?▼

Frontend security scanning identifies misconfigurations and exposure risks in web application assets. This process detects unsafe cookie attributes, source map leaks, CSP weaknesses, and XSS reflection points by evaluating collected headers and embedded resources.

Do I need any specific tools to perform a client-side security assessment?▼

Performing a client-side security assessment requires HTTP header analysis tools, HTML parsers, and JavaScript static analyzers. These tools evaluate the collected frontend scripts and headers to identify vulnerabilities and exposure risks.

How do I analyze HTTP headers and JavaScript assets for XSS and CSP weaknesses?▼

Analyze HTTP headers and JavaScript assets by running a frontend scan that inputs the target URL. The scan evaluates security headers, scripts, and embedded resources to identify XSS reflection points and CSP weaknesses.

When should I scan my web application frontend for security exposure risks?▼

Scan your web application frontend proactively before deployment or after a security incident. This assessment discovers browser-facing flaws and misconfigurations in scripts and headers when updating frontend defenses.

Related Skills

Explore More Content & Communication Skills→
tusosostusosos

web-scraper

Extract data from web pages using CSS selectors and output JSON or CSV.

Community
Advanced
AcczdyAcczdy
2

testing-for-xss-vulnerabilities

Inject payloads and analyze responses to detect XSS vulnerabilities in web applications.

Community
Advanced
mscipiomscipio

security-scanner

Scans codebases for vulnerabilities, secrets, and unsafe patterns via static analysis.

Community
Advanced
ArianHobson333ArianHobson333
7

essential-tools

Automate penetration testing workflows with Burp Suite and Playwright.

Community
Advanced