security-review-owasp-dom-based-xss-prevention
CommunityFind DOM XSS and browser trust gaps fast
Software Engineering#owasp#security review#framing#cross-origin#dom xss#third-party scripts#browser policies
Authorsjinks
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill helps reviewers identify DOM-based XSS risks, browser trust boundary mistakes, and client-side policy weaknesses that can lead to script execution, data leakage, or unsafe embedding behavior.
Core Features & Use Cases
- DOM Sink Analysis: Trace attacker-controlled input into browser APIs, templates, storage, and other executable contexts.
- Browser Policy Review: Assess CSP, framing, sandboxing, navigation rules, and origin boundaries for bypasses or weak deployment.
- Third-Party Risk Review: Evaluate embedded scripts, widgets, extensions, and browser integrations that expand attacker influence.
- Use Case: Review a front-end feature that renders user input, loads external scripts, and exchanges messages across origins to confirm whether the implementation is safe or exposed.
Quick Start
Use the security-review-owasp-dom-based-xss-prevention skill to review this web flow, focusing on DOM sinks, browser policies, and any cross-origin or third-party trust boundaries.
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: security-review-owasp-dom-based-xss-prevention Download link: https://github.com/sjinks/ai-owasp-skillset/archive/main.zip#security-review-owasp-dom-based-xss-prevention Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 537,000+ vetted skills library on demand.