Trace user input from sources to unsafe sinks to detect XSS vulnerabilities.
npx skills add https://github.com/ersinkoc/security-check --skill sc-xss
Please help me install this Agent Skill. Skill: sc-xss Source: https://github.com/ersinkoc/security-check/tree/main/skills/sc-xss Command: npx skills add https://github.com/ersinkoc/security-check --skill sc-xss
Cross-Site Scripting vulnerabilities affect web applications across Reflected, Stored, and DOM-based contexts. This Skill identifies unsafe output patterns, helps map sources to sinks, and guides remediation to reduce attack surfaces across modern frontend frameworks.
Scan your project to identify Reflected, Stored, and DOM-based XSS across templates and client-side code.
High-intent search queries and answers about installing and using this skill.
Find Cross-Site Scripting vulnerabilities by tracing data flows from user input sources to unsafe sinks within frontend template engines. This maps Reflected, Stored, and DOM-based XSS contexts to guide precise remediation and auto-escaping improvements.
Reflected, Stored, and DOM-based XSS differ by their execution vectors. This Skill detects all three by tracing user inputs to unsafe sinks across server templates and client-side DOM operations, providing context-aware sanitization checks for each.
Trace user input to unsafe sinks for DOM-based XSS by mapping client-side data flows from entry points to dangerous DOM operations. This Skill evaluates context-aware sanitization checks to identify unescaped execution paths in frontend logic.
XSS detection works with large codebases and modern frontend frameworks by scanning templates and client-side logic. Security teams can run comprehensive scans across frontend-heavy projects to prioritize fixes in common template engines.
Remediate XSS and improve Content Security Policy by applying recommended sanitization, auto-escaping best practices, and targeted CSP improvements. This Skill provides guidance to reduce attack surfaces across modern frontend frameworks after identifying unsafe sinks.
Thiago-Cruz-engIdentifies security vulnerabilities, performance problems, correctness defects and maintainability issues in source code during reviews.
hung-phanEncode output by context and implement CSP to mitigate XSS vulnerabilities.
eliottbusinessAutomate pre-commit code review with static analysis and security scanning.
AcczdyInject payloads and analyze responses to detect XSS vulnerabilities in web applications.
