How do I install the HTML Injection Testing skill?

Run npx skillmds@latest add dokhacgiakhoa/html-injection-testing in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is HTML Injection Testing safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with HTML Injection Testing?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is HTML Injection Testing free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published HTML Injection Testing?

Dokhacgiakhoa (@dokhacgiakhoa) published this skill. Their other Agent Skills are listed on their SkillMD profile.

HTML Injection Testing

Name: HTML Injection Testing
Rating: 4.2 (5 reviews)
Author: Dokhacgiakhoa

This skill should be used when the user asks to "test for HTML injection", "inject HTML into web pages", "perform HTML injection attacks", "deface web applications", or "test content injection vulnerabilities". It provides comprehensive HTML injection attack techniques and testing methodologies.

Dokhacgiakhoa Updated Sep 9, 2026 505 repo stars

Web & Frontend

Install

Press C to copy

$ npx skillmds@latest add dokhacgiakhoa/html-injection-testing

Installs into ~/.claude/skills (or .claude/skills inside a project). Restart Claude Code to pick it up.

Download .zip

＋ Add to plugin

README badge

[![SkillMD](https://skillmd.com/badge/dokhacgiakhoa/html-injection-testing.svg)](https://skillmd.com/skills/dokhacgiakhoa/html-injection-testing)

Trust & safety

2 of 3 audits passed

Last audited Sep 24, 2026 · commit b53938a

Permissions this skill uses

Documentation only
No scripts, network access, or credentials are involved.

Works with: Claude Code Claude.ai OpenAI Codex +

File contents

HTML Injection Testing

Purpose

Identify and exploit HTML injection vulnerabilities that allow attackers to inject malicious HTML content into web applications. This vulnerability enables attackers to modify page appearance, create phishing pages, and steal user credentials through injected forms.

Prerequisites

🧠 Knowledge Modules (Fractal Skills)

1. Required Tools

2. Required Knowledge

3. Phase 1: Understanding HTML Injection

4. Phase 2: Identifying Injection Points

5. Phase 3: Basic HTML Injection Testing

6. Phase 4: Types of HTML Injection

7. Phase 5: Phishing Attack Construction

8. Phase 6: Defacement Payloads

9. Phase 7: Advanced Injection Techniques

10. Phase 8: Bypass Techniques

11. Phase 9: Automated Testing

12. Phase 10: Prevention and Remediation

13. Common Test Payloads

14. Injection Contexts

15. Encoding Types

16. Attack Limitations

17. Testing Considerations

18. Severity Assessment

---name: html-injection-testingdescription: This skill should be used when the user asks to "test for HTML injection", "inject HTML into web pages", "perform HTML injection attacks", "deface web applications", or "test content injection vulnerabilities". It provides comprehensive HTML injection attack techniques and testing methodologies.--- # HTML Injection Testing ## Purpose Identify and exploit HTML injection vulnerabilities that allow attackers to inject malicious HTML content into web applications. This vulnerability enables attackers to modify page appearance, create phishing pages, and steal user credentials through injected forms. ## Prerequisites ## 🧠 Knowledge Modules (Fractal Skills) ### 1. [Required Tools](./sub-skills/required-tools.md) ### 2. [Required Knowledge](./sub-skills/required-knowledge.md) ### 3. [Phase 1: Understanding HTML Injection](./sub-skills/phase-1-understanding-html-injection.md) ### 4. [Phase 2: Identifying Injection Points](./sub-skills/phase-2-identifying-injection-points.md) ### 5. [Phase 3: Basic HTML Injection Testing](./sub-skills/phase-3-basic-html-injection-testing.md) ### 6. [Phase 4: Types of HTML Injection](./sub-skills/phase-4-types-of-html-injection.md) ### 7. [Phase 5: Phishing Attack Construction](./sub-skills/phase-5-phishing-attack-construction.md) ### 8. [Phase 6: Defacement Payloads](./sub-skills/phase-6-defacement-payloads.md) ### 9. [Phase 7: Advanced Injection Techniques](./sub-skills/phase-7-advanced-injection-techniques.md) ### 10. [Phase 8: Bypass Techniques](./sub-skills/phase-8-bypass-techniques.md) ### 11. [Phase 9: Automated Testing](./sub-skills/phase-9-automated-testing.md) ### 12. [Phase 10: Prevention and Remediation](./sub-skills/phase-10-prevention-and-remediation.md) ### 13. [Common Test Payloads](./sub-skills/common-test-payloads.md) ### 14. [Injection Contexts](./sub-skills/injection-contexts.md) ### 15. [Encoding Types](./sub-skills/encoding-types.md) ### 16. [Attack Limitations](./sub-skills/attack-limitations.md) ### 17. [Testing Considerations](./sub-skills/testing-considerations.md) ### 18. [Severity Assessment](./sub-skills/severity-assessment.md)

Dokhacgiakhoa/Agent-Skills-4-Vibe-Coding-CLI/tree/main/.agent/skills/html-injection-testing commit b53938a841

Frequently asked questions

npx skillmds@latest add dokhacgiakhoa/html-injection-testing

HTML Injection Testing

File contents

HTML Injection Testing

Purpose

Prerequisites

🧠 Knowledge Modules (Fractal Skills)

1. Required Tools

2. Required Knowledge

3. Phase 1: Understanding HTML Injection

4. Phase 2: Identifying Injection Points

5. Phase 3: Basic HTML Injection Testing

6. Phase 4: Types of HTML Injection

7. Phase 5: Phishing Attack Construction

8. Phase 6: Defacement Payloads

9. Phase 7: Advanced Injection Techniques

10. Phase 8: Bypass Techniques

11. Phase 9: Automated Testing

12. Phase 10: Prevention and Remediation

13. Common Test Payloads

14. Injection Contexts

15. Encoding Types

16. Attack Limitations

17. Testing Considerations

18. Severity Assessment

Related skills

Frequently asked questions

How do I install the HTML Injection Testing skill?

What does the HTML Injection Testing skill do?

Is HTML Injection Testing safe to use?

Which AI agents work with HTML Injection Testing?

Is HTML Injection Testing free to use?

Who published HTML Injection Testing?