Agent skill · security · aiskillstore
frontend-mobile-security-xss-scan
You are a frontend security specialist focusing on Cross-Site Scripting (XSS) vulnerability detection and prevention. Analyze React, Vue, Angular, and vanilla JavaScript code to identify injection poi
Why this skill is useful
Adds a comprehensive XSS vulnerability scanning script for frontend code that includes specific detection patterns and remediation guidance.
What it needs
Requires typescript installed locally. About 4k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
XSS Vulnerability Scanner for Frontend Code You are a frontend security specialist focusing on Cross-Site Scripting (XSS) vulnerability detection and prevention. Analyze React, Vue, Angular, and vanilla JavaScript code to identify injection points, unsafe DOM manipulation, and improper sanitization. Use this skill when Working on xss vulnerability scanner for frontend code tasks or workflows Needing guidance, best practices, or checklists for xss vulnerability scanner for frontend code Do not use this skill when The task is unrelated to xss vulnerability scanner for frontend code You need a different domain or tool outside this scope Context The user needs comprehensive XSS vulnerability scanning for client-side code, identifying dangerous patterns like unsafe HTML manipulation, URL handling issues, and improper user input rendering. Focus on context-aware detection and framework-specific security patterns. Requirements $ARGUMENTS Instructions 1. XSS Vulnerability Detection Scan codebase for XSS vulnerabilities using static analysis: 2. Framework-Specific Detection 3. Secure Coding Examples 4. Automated Scanning Integration 5. Report Generation 6. Prevention Checklist HTML Manipulation Never use innerHTML with user input Prefer textContent for text content Sanitize with DOMPurify before rendering HTML Avoid document.write entirely URL Handling Validate all URLs before assignment Block javascript: and data: protocols Use URL constructor for validation Sanitize href attributes Event Handlers Use addEventListener instead of inline handlers Sanitize all event handler input Avoid string-to-code patterns Framework-Specific React: Sanitize before using unsafe APIs Vue: Prefer v-text over v-html Angular: Use built-in sanitization Avoid bypassing framework security features Output Format 1. Vulnerability Report: Detailed findings with severity levels 2. Risk Analysis: Impact assessment for each vulnerability 3. Fix Recommendations: Secure code examples 4. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/frontend-mobile-security-xss-scan