Html injection testing
Skill newmindsgroup/ai-agent-skills-library/dist/skills/html-injection-testing
Identify and exploit HTML injection vulnerabilities that allow attackers to inject malicious HTML content into web applications. This vulnerability enables attackers to modify page appearance, create phishing pages, and steal user credentials through injected forms.From its SKILL.md
npx -y skills add newmindsgroup/ai-agent-skills-library --skill html-injection-testingAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its file declares
Copied from the file, not written here
The file declares its own license as MIT. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.
SKILL.md
2.3 KB, 374 tokens by cl100k_base, as published. Nobody here has run it
HTML Injection Testing
Identify and exploit HTML injection vulnerabilities that allow attackers to inject malicious HTML content into web applications. This vulnerability enables attackers to modify page appearance, create phishing pages, and steal user credentials through injected forms.
When to Use
- This skill is applicable to execute the workflow or actions described in the overview.
Core Workflow
- Confirm the request matches this skill's trigger, scope, and risk profile.
- Use the topic map to identify the relevant pattern, checklist, or example before writing detailed guidance or code.
- Load
references/full-guidance.mdwhen implementation details, examples, anti-patterns, validation checks, or edge cases are needed. - Apply only the relevant guidance instead of loading or repeating the entire reference by default.
- Verify the result against any validation checks, limitations, security notes, or platform constraints in the reference.
Topic Map
- Purpose
- Prerequisites
- Required Tools
- Required Knowledge
- Outputs and Deliverables
- Core Workflow
- Phase 1: Understanding HTML Injection
- Phase 2: Identifying Injection Points
- Phase 3: Basic HTML Injection Testing
- Phase 4: Types of HTML Injection
- Phase 5: Phishing Attack Construction
- Phase 6: Defacement Payloads
- Phase 7: Advanced Injection Techniques
- Phase 8: Bypass Techniques
- Phase 9: Automated Testing
- Phase 10: Prevention and Remediation
- Quick Reference
- Common Test Payloads
Reference Map
references/full-guidance.mdpreserves the complete original guidance, including examples and detailed edge cases.
Progressive Loading
Keep this SKILL.md as the compact routing and workflow entrypoint. Load the reference file only when the user task requires the deeper implementation material.
What ships with it: 1 file
12.9 KB alongside SKILL.md
references/
- full-guidance.md12.9 KB