Cross Site Scripting And HTML Injection Testing
This is a security testing skill for finding XSS and HTML injection vulnerabilities in web applications. It covers all three major attack vectors: stored, reflected, and DOM-based XSS. You'll need Burp Suite or browser dev tools, test accounts, and a solid understanding of JavaScript execution contexts and DOM manipulation. The skill walks you through systematic injection testing, session hijacking demonstrations, and validating whether input sanitization actually works. Originally from sickn33/antigravity-awesome-skills, now maintained in davila7's template collection. Useful if you're doing penetration testing or security assessments, though the Snyk audit failed while other security checks passed, so review the code before running it against production systems.
- GitHub stars
- 30.2K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add davila7/claude-code-templates --skill 'Cross-Site Scripting and HTML Injection Testing' --agent claude-codeInstalls into .claude/skills of the current project.
Files
This is a security testing skill for finding XSS and HTML injection vulnerabilities in web applications. It covers all three major attack vectors: stored, reflected, and DOM-based XSS. You'll need Burp Suite or browser dev tools, test accounts, and a solid understanding of JavaScript execution contexts and DOM manipulation. The skill walks you through systematic injection testing, session hijacking demonstrations, and validating whether input sanitization actually works. Originally from sickn33/antigravity-awesome-skills, now maintained in davila7's template collection. Useful if you're doing penetration testing or security assessments, though the Snyk audit failed while other security checks passed, so review the code before running it against production systems.
Browse the repository on GitHubSponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/davila7/claude-code-templates
- Categories
- Frontend Development, Testing & QA, Security
- First seen
- Jun 3, 2026
More from davila7/claude-code-templates
All 618- Data Privacy Compliance
- Email Composer
- Error Resolver
- Ethical Hacking Methodology
- Excel Analysis
- File Path Traversal Testing
- Git Commit Helper
- Hook Development
- HTML Injection Testing
- IDOR Vulnerability Testing
- Linux Privilege Escalation
- Linux Production Shell Scripts
- MCP Integration
- Metasploit Framework
- Network 101
- PDF Processing
- PDF Processing Pro
- Pentest Checklist
- Pentest Commands
- Plugin Settings
- Plugin Structure
- Privilege Escalation Methods
- Red Team Tools And Methodology
- Security Scanning Tools
Recommended
More Frontend Development
forgecad-component-modelkostard/forgecad-public-kitEnforce the ForgeCAD Component Model when building multi-part assemblies. Parts build at origin, connectors position them, data flows down from parent. Use when0skills.sh installs
frontend-designlukerenton/explore-claude-codeCreate distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, or applicat0skills.sh installs
Cross-Site Scripting and HTML Injection Testingsickn33/antigravity-awesome-skillscross site scripting and html injection testing0skills.sh installs
imagegen-frontend-webleonxlnx/taste-skillElite frontend image-direction skill for generating premium, conversion-aware website design references. CRITICAL OUTPUT RULE — generate ONE separate horizontal380.2Kskills.sh installsimagegen-frontend-mobileleonxlnx/taste-skillElite mobile app image-generation skill for creating premium, app-native screen concepts and flows. Designed for iOS, Android, and cross-platform mobile product373.8Kskills.sh installs