Agent skill · security · aradotso
acidrain-security-testing-scripts
Use AcidRain's XSS analysis resources, JavaScript utilities, and PHP injection testing samples for authorized web security research and hands-on learning.
Why this skill is useful
Provides specific JavaScript and PHP testing scripts for XSS and injection vulnerabilities that are not commonly found in public resources.
What it needs
Requires git installed locally. About 8k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
AcidRain Security Testing Scripts Skill by ara.so — Security Skills collection. AcidRain is a web-oriented collection of XSS analysis resources, JavaScript utilities, PHP examples, and injection testing samples designed for authorized security testing, hands-on learning, and controlled research. The project provides browser-side and server-side material organized for security researchers and developers conducting legitimate vulnerability assessments. Installation Clone the repository and navigate to the working directory: The repository structure typically includes: Project Purpose and Scope AcidRain provides: XSS Analysis Resources: Payloads, vectors, and test cases for cross-site scripting research JavaScript Utilities: Client-side scripts for browser-based security exercises PHP Resources: Server-side examples for testing input validation and output encoding Injection Testing Samples: Code demonstrating various injection techniques Research Snippets: Compact, modifiable code fragments for controlled testing Critical Authorization Requirement: Only use these scripts against: Applications you own or have explicit permission to test Deliberately vulnerable training environments (e.g., DVWA, WebGoat) Systems covered by a defined security testing agreement JavaScript XSS Resources Basic XSS Payload Structure JavaScript payloads typically follow patterns for testing input reflection and execution context: Advanced JavaScript Testing Utilities DOM Manipulation Analysis Input Reflection Detector PHP Server-Side Resources Input Validation Testing SQL Injection Testing Framework File Upload Security Testing XSS Payload Collections Bypass Techniques Context-Specific Payloads Configuration and Environment Setup Environment Variables Create a .env file for configuration (never commit this file): PHP Configuration Common Testing Patterns Automated XSS Scanning Workflow Manual Testing Workflow Troubleshooting Payloads Not Executing Problem: XSS payloads are reflected but not ex …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/acidrain-security-testing-scripts