# Xss

> Skills for Cross-Site Scripting (XSS) and client-side injection attacks including clickjacking.

- Skill: `omkar-ukirde/xss` (Agent Skill, multi-file: 3 files)
- Install (CLI): `npx skillmds@latest add omkar-ukirde/xss`
- Raw SKILL.md: https://api.skillmd.com/api/skills/omkar-ukirde/xss/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: omkar-ukirde (https://skillmd.com/u/omkar-ukirde)
- Updated: 2026-09-21
- Page: https://skillmd.com/skills/omkar-ukirde/xss

---


# Cross-Site Scripting (XSS)

Injection of malicious scripts into web pages viewed by other users.

## Skills

- [XSS](references/xss.md) - Cross-Site Scripting attacks
- [Clickjacking](references/clickjacking.md) - UI redressing attacks

## Quick Reference

| Type | Location | Example |
|------|----------|---------|
| Reflected | URL params | `<script>alert(1)</script>` |
| Stored | Database | Persistent payload |
| DOM | Client JS | `#<img onerror=alert(1)>` |