Tests web applications for reflected, stored, and DOM-based Cross-Site Scripting by injecting JavaScript payloads with Burp Suite (XSS extensions, Active Scan++) and browser tools, then bypassing sanitization and CSP to demonstrate session hijacking and user impersonation. Use for OWASP WSTG client-side injection testing or when evaluating input sanitization and output encoding coverage.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill testing-for-xss-vulnerabilitiesnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill testing-for-xss-vulnerabilities -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill testing-for-xss-vulnerabilities -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/testing-for-xss-vulnerabilitiesgh skill install mukul975/Anthropic-Cybersecurity-Skills testing-for-xss-vulnerabilitiesgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/testing-for-xss-vulnerabilities ~/.claude/skills/testing-for-xss-vulnerabilities # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/testing-for-xss-vulnerabilities ~/.agents/skills/testing-for-xss-vulnerabilities # Codex, Cursor, Gemini CLI, Copilot, OpenCode