Skill 与 AgentSKILLS & AGENTS· CLAUDE-SKILL
songjianyang/xss-audit
在React和JavaScript代码里查XSS漏洞，14层静态检查并生成报告A static XSS audit skill with 14 layers of checks for React, TypeScript, and JavaScript projects.
根据公开文档整理，未运行实测；费用以项目官网为准。Based on public documentation, without runtime testing. Check the project site for pricing.
能力CAPABILITIES
扫描React等前端代码的XSS漏洞
生成带修复建议的审计报告
覆盖14类注入风险检查点
区分疑似命中与确认漏洞
Audit DOM injection points like innerHTML and document.write
Check URL handling and navigation for validation bypasses
Review sanitizer and markdown pipelines for mXSS risks
Analyze Trusted Types and CSP enforcement gaps
Generate a detailed report with severity and fix suggestions
上手GET STARTED
文档里没有找到可识别的安装命令。这类项目按发布规则不会进入榜单，只能在这里查看。No recognisable install command was found in the docs. Projects like this never enter the ranked list under our publishing rules — they are viewable here only.
把 xss-audit 目录复制到你的 agent 的 skills 目录（例如 <skills-directory>/xss-audit/SKILL.md）。Copy the directory into your agent's skills directory, then use /xss-audit or /xss-audit src/ to run it.
使用限制LIMITATIONS
以下要求与风险来自文档静态检查，未执行项目代码；扫描没有命中，不代表使用安全。Risk here is evidence, not an alarm. These findings come from static scanning of the docs; we never execute a project’s code.
限制LIMITS
未知Unknown
静态扫描STATIC SCAN
在 README、SKILL.md 和依赖清单中没有匹配到已知风险模式。No known risk patterns matched in the README, SKILL.md or dependency list.
静态扫描未发现明显风险，但不代表安全。The static scan found no obvious risk patterns in the documentation, but that does not prove the project is safe. Always review the code and dependencies before use.
项目动态PROJECT ACTIVITY
首次发现FIRST SEEN
26 OCT 202626 OCT 2026
增长GROWTH
+14.2%+14.2%
478 → 546 stars · 8 个快照478 → 546 stars · 8 snapshots
状态STATUS
新发布New
质量 A-Quality A-
作者在README中称，这套工作流来自他真实漏洞赏金项目中的日常审计，帮助他发现了几十个XSS漏洞。Created from real-world bug bounty experience, refined over a year of daily use.
{
"agents": [],
"apiKey": null,
"docker": null,
"taxonomy": {
"scores": {
"design": 1,
"ai-tools": 0,
"dev-tools": 0,
"indie-web": 0,
"skill-agent": 1,
"productivity": 0
},
"primary": "skill-agent",
"secondary": "claude-skill"
},
"localRuntime": null,
"skillMdTotal": 1,
"skillMdErrors": [],
"treeTruncated": false,
"categoryScores": {
"data": 0,
"agent": 0,
"media": 0,
"design": 2,
"browser": 0,
"devtool": 0,
"security": 2,
"marketing": 0,
"productivity": 0
},
"classification": [
{
"signal": "1 SKILL.md with name + description",
"weight": 0.95
},
{
"signal": "README describes a Claude / Agent Skill",
"weight": 0.7
}
],
"scannedSources": [
"readme",
"SKILL.md"
],
"skillMdFetched": 1
}