Claude MarketplacesSubmit
sickn33 avatar

Xss Html Injection

sickn33/antigravity-awesome-skills

This is a comprehensive penetration testing skill for identifying and exploiting XSS and HTML injection vulnerabilities in web applications. It walks through stored, reflected, and DOM-based XSS detection, complete with payload examples for session hijacking, credential theft, and phishing form injection. The workflow covers everything from basic reflection testing to filter bypass techniques using encoding and tag variations. You'd use this during authorized security assessments when you need systematic client-side injection testing across all major attack vectors. The skill includes practical examples like keylogger injection and CSS-based data exfiltration, though obviously this is strictly for authorized pentesting with written scope agreements. It's thorough but assumes you already understand JavaScript execution contexts and HTTP fundamentals.

skills.sh installs
127
GitHub stars
39.4K
last updated
Jun 3, 2026
View on GitHub

Install

$ npx -y skills add sickn33/antigravity-awesome-skills --skill xss-html-injection --agent claude-code

Installs into .claude/skills of the current project.

Files

⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited.

Mandatory confirmation gate Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:

  1. Ask the user to state the exact target URL, IP, account, or resource.
  2. Ask the user to confirm written authorization and the permitted scope.
  3. Show the exact command(s) and explain their expected effect.
  4. Wait for explicit confirmation in the current conversation.

Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.

AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.

Cross-Site Scripting and HTML Injection Testing

Detailed Guide

SKILL.md on GitHub

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Details

Repository
github.com/sickn33/antigravity-awesome-skills
Categories
Frontend Development, Security
First seen
Jun 3, 2026

More from sickn33/antigravity-awesome-skills

All 708

Recommended

More Frontend Development
1vudovn avatartailwind-patternsvudovn/antigravity-kittailwind patterns126skills.sh installs
2shipshitdev avatarnextjs-validatorshipshitdev/librarynextjs validator119skills.sh installs
3agnosticui avatarupdate-component-docsagnosticui/agnosticuiUpdate component documentation when code changes0skills.sh installs
4butterbase-ai avatarjourney-frontendbutterbase-ai/butterbase-skillsUse as the frontend build stage of the Butterbase journey. Implements the Frontend section of 02-plan.md by delegating to deploy-frontend. Scaffolds (if needed)0skills.sh installs
5composiohq avatarfrontend-designcomposiohq/awesome-claude-pluginsCreate distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, or applicat0skills.sh installs
6dtsola avatarfrontend-designdtsola/xiaoyaosearchCreate distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, or applicat0skills.sh installs