security-review-owasp-securing-cascading-style-sheets

What problem does it solve?

This Skill helps reviewers evaluate CSS security risks such as privileged style leakage, unauthorized stylesheet exposure, and user-controlled styling abuse.

Core Features & Use Cases

• Access Control Review: Check whether role-specific or environment-specific stylesheets are protected from unauthorized access.
• Selector Disclosure Review: Inspect class names, IDs, and selector patterns that may reveal hidden workflows or privileged capabilities.
• User-Controlled Styling Review: Assess whether user content, uploads, or injected markup can drive overlays, deceptive layouts, or clickjacking-like behavior.
• Use Case: Use this Skill when auditing a frontend feature, design system, or content pipeline for CSS-based reconnaissance and visual deception risks.

Quick Start

Use the security-review-owasp-securing-cascading-style-sheets skill to review the relevant CSS files and styling paths for leakage, access-control gaps, and overlay abuse.