Agent skill · security · aradotso
acidrain-security-testing-toolkit
Use AcidRain's XSS analysis resources, JavaScript utilities, and PHP injection testing samples for authorized web security research and learning
Why this skill is useful
Provides specific JavaScript and PHP scripts for testing XSS vulnerabilities that are not widely available in public documentation.
What it needs
Requires git installed locally. About 6k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
AcidRain Security Testing Toolkit Skill by ara.so — Security Skills collection. AcidRain is a web-oriented collection of XSS analysis resources, JavaScript utilities, PHP examples, and injection testing samples designed for authorized security testing and hands-on learning. This toolkit provides browser-side and server-side scripts for exploring cross-site scripting behavior, input handling, and output processing in controlled environments. Installation Clone the repository and navigate to the working directory: Inspect the directory structure to understand available resources: Expected structure: Key Components JavaScript Utilities Client-side scripts for browser-based security testing. Place scripts in test environments or controlled pages: PHP Security Research Scripts Server-side examples for testing input validation and output encoding: XSS Injection Testing Samples Common XSS patterns for controlled testing: Configuration Environment Setup Create a configuration file for test environments: PHP Configuration Common Patterns Pattern 1: Automated Payload Testing Pattern 2: PHP Input Validation Testing Pattern 3: Context-Aware XSS Testing Troubleshooting Script Execution Blocked Problem: JavaScript payloads are not executing in test environment. Solution: Check Content Security Policy (CSP) headers: PHP Script Not Executing Problem: PHP scripts return source code instead of executing. Solution: Ensure PHP is installed and web server is configured: Authorization Checks Failing Problem: Tests fail due to authorization requirements. Solution: Set up proper test environment variables: Results Not Logging Problem: Test results are not being saved to log files. Solution: Check log directory permissions and configuration: Payload Encoding Issues Problem: Payloads are automatically encoded or modified before testing. Solution: Use raw payload handling: Best Practices 1. Always obtain authorization before testing any system 2. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/acidrain-security-testing-toolkit