1---2name: xss-scanner3description: XSS Scanner4---5# XSS Scanner67Detect cross-site scripting vulnerabilities in your frontend code before they ship.89## Quick Start1011```bash12npx ai-xss-check13```1415## What It Does1617- Scans JavaScript/TypeScript for XSS vulnerabilities18- Detects unsafe innerHTML, eval, and DOM manipulation19- Identifies unescaped user input in templates20- Checks React dangerouslySetInnerHTML usage21- Provides fix suggestions for each finding2223## Usage2425```bash26# Scan current directory27npx ai-xss-check2829# Scan specific files30npx ai-xss-check ./src/components31```3233## When to Use3435- Before security audits36- Reviewing third-party code37- Setting up CI security gates38- Training junior devs on XSS prevention3940## Part of the LXGIC Dev Toolkit4142One of 110+ free developer tools from LXGIC Studios. No paywalls, no sign-ups.4344**Find more:**45- GitHub: https://github.com/lxgic-studios46- Twitter: https://x.com/lxgicstudios47- Substack: https://lxgicstudios.substack.com48- Website: https://lxgicstudios.com4950## License5152MIT. Free forever.
Run npx skillmds@latest add demerzels-lab/xss-scanner in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
XSS Scanner It is listed under Security on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
Demerzels-lab (@demerzels-lab) published this skill. Their other Agent Skills are listed on their SkillMD profile.