Xss html injection
Skill newmindsgroup/ai-agent-skills-library/dist/skills/xss-html-injection
Shared library of AI agent skills — works across Claude Code, Cursor, Codex, Windsurf, OpenCode, and Google Antigravity via a single universal installer.
npx -y skills add newmindsgroup/ai-agent-skills-library --skill xss-html-injectionAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws, demonstrate exploitation techniques for session hijacking and credential theft, and validate input sanitization and output encoding mechanisms.
The file declares its own license as MIT. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.
SKILL.md
2.3 KB, as published. Nobody here has run it
Cross-Site Scripting and HTML Injection Testing
Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws, demonstrate exploitation techniques for session hijacking and credential theft, and validate input sanitization and output encoding mechanisms.
When to Use
- This skill is applicable to execute the workflow or actions described in the overview.
Core Workflow
- Confirm the request matches this skill's trigger, scope, and risk profile.
- Use the topic map to identify the relevant pattern, checklist, or example before writing detailed guidance or code.
- Load
references/full-guidance.mdwhen implementation details, examples, anti-patterns, validation checks, or edge cases are needed. - Apply only the relevant guidance instead of loading or repeating the entire reference by default.
- Verify the result against any validation checks, limitations, security notes, or platform constraints in the reference.
Topic Map
- Purpose
- Inputs / Prerequisites
- Required Access
- Technical Requirements
- Legal Prerequisites
- Outputs / Deliverables
- Core Workflow
- Phase 1: Vulnerability Detection
- Phase 2: Stored XSS Exploitation
- Phase 3: Reflected XSS Exploitation
- Phase 4: DOM-Based XSS Exploitation
- Phase 5: HTML Injection Techniques
- Phase 6: Filter Bypass Techniques
- Quick Reference
- XSS Detection Checklist
- Common XSS Payloads
- Cookie Theft Payload
- Session Hijacking Template
Reference Map
references/full-guidance.mdpreserves the complete original guidance, including examples and detailed edge cases.
Progressive Loading
Keep this SKILL.md as the compact routing and workflow entrypoint. Load the reference file only when the user task requires the deeper implementation material.