Skills
.Work. You
Rest

security-review-owasp-html5-security

Community

Spot browser security flaws fast

Software Engineering#owasp#browser security#security review#csp#html5#cross-origin#dom injection
Authorsjinks
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill helps reviewers find HTML5 security weaknesses in browser-facing applications before they become exploitation paths. It focuses on trust boundaries that are easy to miss during implementation, deployment, and review.

Core Features & Use Cases

  • DOM and client-side sink review: Detect unsafe data flows into executable browser contexts, storage, and messaging APIs.
  • Browser policy and framing analysis: Evaluate CSP, framing rules, origin boundaries, and other controls that protect sensitive UI and data.
  • Third-party script and ecosystem checks: Review embedded widgets, extensions, and external code that can expand attacker influence.
  • Use case: A reviewer can inspect a front-end authentication flow, confirm whether attacker-controlled input reaches dangerous DOM sinks, and determine whether the browser controls are sufficient.

Quick Start

Ask Copilot to review the selected files with this skill and report confirmed HTML5 security issues with evidence, severity, and remediation.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: security-review-owasp-html5-security
Download link: https://github.com/sjinks/ai-owasp-skillset/archive/main.zip#security-review-owasp-html5-security

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 536,000+ vetted skills library on demand.