domains / families / security / sast-xss

sast-xss

authentic

Detect Cross-Site Scripting (XSS) vulnerabilities in a codebase using a three-phase approach: recon (find HTML/JS/DOM sink sites), batched verify (trace user input to sinks in parallel subagents, 3 sink sites each), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first). Outputs findings to sast/xss-results.md. Use when asked to find XSS or cross-site scripting bugs.

When to use

• find XSS bugs
• find cross-site scripting bugs
• detect XSS vulnerabilities
• trace user input to sinks
• find HTML/JS/DOM sink sites

When not to use

• CSRF
• SQLi via XSS
• Clickjacking
• Header injection
• Safe template output
• textContent / innerText

Skill page

Source