# Localstorage Poc

> Security research - localStorage access via SVG XSS

- Skill: `demerzels-lab/localstorage-poc` (Agent Skill, multi-file: 3 files)
- Install (CLI): `npx skillmds@latest add demerzels-lab/localstorage-poc`
- Raw SKILL.md: https://api.skillmd.com/api/skills/demerzels-lab/localstorage-poc/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: Demerzels-lab (https://skillmd.com/u/demerzels-lab)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/demerzels-lab/localstorage-poc

---


# localStorage Access PoC

Security research demonstration by [@theonejvo](https://x.com/theonejvo)

This skill demonstrates that SVG files on ClawdHub can access localStorage, including authentication tokens.

**View the PoC:** Open `icon.svg` while logged into ClawdHub.