jxscout-bookmarks

What problem does it solve?

This Skill eliminates the tedious, disorganized process of manually tracking interesting code snippets during client-side security research, ensuring all relevant sinks, gadgets, and flows are documented and easily accessible for later analysis.

Core Features & Use Cases

• Bookmark Group Management: Create, update, and delete categorized groups for different types of security-relevant code (e.g., postMessage handlers, XSS sinks, authentication logic) with custom highlight colors for VS Code.
• Precise Code Bookmarking: Mark exact line and column ranges in JS, HTML, or HTTP request/response files with markdown notes explaining why the code is security-relevant.
• Use Case: When reviewing a web application's client-side code for XSS vulnerabilities, use this Skill to group all unvalidated postMessage handlers, bookmark each sink with notes about missing origin checks, and track multi-step request construction flows in dedicated groups.

Quick Start

Use the jxscout-bookmarks skill to create a bookmark group for XSS sinks, then bookmark all unvalidated postMessage handlers in the target JS file with notes explaining the missing origin check vulnerability.