songjianyang / xss-audit
git clone https://github.com/songjianyang/xss-audit.git
Static XSS audit skill with 14 review layers for React, TypeScript, and JavaScript codebases, writing findings to a markdown report.
Why you might care
Gives an agent a structured checklist covering DOM sinks, URL validation, JSON-in-script, mXSS, prototype pollution gadgets, and Trusted Types for security reviews. Its README stresses that search matches are not confirmed vulnerabilities, so it is meant as a triage aid that still needs manual verification. Copy it into an agent's skills directory to use.
+186
stars, 24h · #218
+440
stars, 7 days · #561
+440
stars, 30 days · #2,054
440
★ total · +440% this week
127
forks · 0 open issues
Star history (as recorded here)
LicenseMIT
Created2026-10-24 (2d ago)
Last push2d ago
Watchers1
OwnerUser
Links
README
Loading README…
Blurb generated by claude-haiku-5-5 today. Star deltas marked ~ are extrapolated from partial history.