Agent skill · security · aradotso
acidrain-security-script-hub
Web-oriented XSS analysis resources, JavaScript utilities, and PHP examples for authorized security testing and hands-on learning
Why this skill is useful
Provides specific JavaScript and PHP examples for XSS testing that are not commonly found in public documentation.
What it needs
Requires git installed locally. About 7k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
AcidRain Security Script Hub Skill Skill by ara.so — Security Skills collection. What AcidRain Does AcidRain is a web security toolbox containing XSS injection resources, JavaScript utilities, and PHP examples for authorized security testing, education, and research. It provides browser-side and server-side material organized for experimentation in controlled environments. Key capabilities: XSS analysis and cross-site scripting testing resources Client-side JavaScript security utilities Server-side PHP research examples Injection testing samples for input/output validation Web security helper scripts for targeted investigation ⚠️ CRITICAL: Use only against systems you own or have explicit written authorization to test. Unauthorized use is illegal. Installation Clone the repository and navigate to the working directory: Inspect the directory structure before running any scripts: Expected structure: JavaScript Utilities Basic XSS Payload Testing Create a test environment HTML file: XSS Detection Script DOM-Based XSS Analysis PHP Security Testing Input Validation Testing XSS Vulnerable Endpoint (Testing Only) Secure Form Handler Configuration Environment Setup Create a .env file in the project root: Load environment variables in PHP: Test Server Setup Start a PHP development server for testing: Common Testing Patterns XSS Reflection Testing Stored XSS Testing Content Security Policy Testing Reporting and Logging Generate Test Report Troubleshooting Scripts Not Executing Issue: PHP scripts return 403 or permission errors Solution: CORS Issues with JavaScript Issue: Browser blocks fetch requests during testing Solution: Test Mode Not Enabled Issue: Scripts refuse to run vulnerable code Solution: False Positives in Detection Issue: XSS detector reports issues on properly sanitized code Solution: Database Connection Errors Issue: Stored XSS tests fail due to database connection Solution: Safety Reminders 1. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/acidrain-security-script-hub