exploit-xss
crazyMarky/pentest-skillsSkill
Cross-site scripting (XSS) vulnerability detection and exploitation. Supports reflected XSS, stored XSS, DOM-based XSS, and blind XSS testing. Use this skill when user mentions XSS, cross-site scripting, script injection, or needs to test JavaScript injection in parameters, forms, headers, or DOM sources.
Why this score
This repo hosts 10 skills, so its 340 stars are split between them (about 34 each) for scoring.
Popularity score: 54/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit 616feed88d53, with Cisco's open-source skill-scanner.
What its code does:
- Runs shell commands Common for dev tools. Read the commands it runs.SKILL.md:224
- Runs code it builds while running (eval or exec) Harder to read ahead of time, since the code is assembled while it runs.scripts/blind_xss_tester.py:74, scripts/csp_detector.py:123, scripts/framework_xss_tester.py:24 and 5 more
- Makes network requestsSKILL.md, scripts/blind_xss_tester.py:195, scripts/csp_detector.py:217 and 25 more
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneexploit-xss crazyMarky/pentest-skills · Skill | 54 | ★ 340 | ≈80 always | 5mo ago |
| 03-exploit-development Masriyan/Claude-Code-CyberSecurity-Skill · Skill Both about exploit | 66 | ★ 490 | ≈24 always | 19d ago |
| exploit-guide 0xSteph/pentest-ai-agents · Subagent Both about exploit and exploitation | 64 | ★ 2.4k | ≈57 in chat | 29d ago |
| xss-tester Stickman230/claude-pentest · Subagent Both about xss and reflected | 48 | ★ 121 | ≈99 in chat | 5mo ago |
| exploit-researcher hypnguyen1209/offensive-claude · Subagent Both about exploit and exploitation | 61 | ★ 394 | ≈38 in chat | 1mo ago |
| web-exploit-agent blacklanternsecurity/red-run · Subagent Both about exploit and exploitation | 58 | ★ 291 | ≈24 in chat | 1mo ago |