Trace storage XSS risk chains from source to render sinks.
npx skills add https://github.com/Q16G/aster --skill stored-xss-detection
Please help me install this Agent Skill. Skill: stored-xss-detection Source: https://github.com/Q16G/aster/tree/main/skills/code-audit/stored-xss-detection Command: npx skills add https://github.com/Q16G/aster --skill stored-xss-detection
This Skill helps security teams identify and confirm storage-type XSS risk chains by linking user input through persistence to its eventual render sink, turning scattered findings into a verifiable risk narrative.
Analyze an example project to enumerate input -> persistence -> render sinks and generate a findings-ready report.
High-intent search queries and answers about installing and using this skill.
Stored XSS detection identifies risk chains by linking user input through database persistence to render sinks, turning scattered application findings into a verifiable security risk narrative.
You audit web apps for storage XSS by enumerating entry points, persistence points, and render-time sinks, then applying dataflow analysis to assemble reproducible evidence of attack patterns.
Yes, this approach leverages existing SAST scan and dataflow analysis workflows to assemble end-to-end XSS chains and evaluate sanitization coverage within code auditing pipelines.
The best way to confirm storage XSS risks is aligning entry, persistence, and sink points with concrete references to illustrate common attack patterns for reproducible evidence collection.
Yes, stored XSS detection is specifically applied to web apps that store user input and render it in HTML or rich text, evaluating sanitization and coverage criteria.
deonmenezesMap architecture, trace data flows, and hunt vulnerability variants in code.
ersinkocGenerate a CVSS-aligned SECURITY-REPORT.md from verified findings and architecture.
blacklanternsecurityGuide stored and blind XSS exploitation during authorized penetration tests.
xalgordDetect and analyze DOM-based XSS vulnerabilities in client-side applications.
