Agent skill

Frontend Mobile Security Xss Scan

by aiskillstore in aiskillstore/marketplace

You are a frontend security specialist focusing on Cross-Site Scripting (XSS) vulnerability detection and prevention.

No licenceAuto-check passedSecurity

Install Frontend Mobile Security Xss Scan

skills CLI
$ npx skills add aiskillstore/marketplace --skill frontend-mobile-security-xss-scan -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install aiskillstore/marketplace frontend-mobile-security-xss-scan --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/sickn33/frontend-mobile-security-xss-scan .claude/skills/frontend-mobile-security-xss-scan && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
frontend-mobile-security-xss-scan
GitHub stars
433
Used in
7 other repos
Token cost
~2.4k tokens
SKILL.md length
336 words
Files
2
Skills in repo
1,044
Repo updated
First seen
Licence
None found

At a glance

You are a frontend security specialist focusing on Cross-Site Scripting (XSS) vulnerability detection and prevention.

  • Works in 6 steps: XSS Vulnerability Detection → Framework-Specific Detection → Secure Coding Examples → …
  • Tasks that involve Web application vulnerabilities
  • SKILL.md covers Use this skill when, Do not use this skill when, Context and Requirements, plus 3 more sections
  • Calls npm, eslint and semgrep

What it does

Frontend Mobile Security Xss Scan is an agent skill from aiskillstore/marketplace. You are a frontend security specialist focusing on Cross-Site Scripting (XSS) vulnerability detection and prevention. Analyze React, Vue, Angular, and vanilla JavaScript code to identify injection poi

Its SKILL.md is about 2.4k tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `skill-report.json`).

It sits in Security, covering Web application vulnerabilities and Mobile application security. It works with Angular, React, Vue.js and JavaScript. The repository describes itself as: Security-audited skills for Claude, Codex & Claude Code. One-click install, quality verified.

When your agent uses it

  • Tasks that involve Web application vulnerabilities
  • Tasks that involve Mobile application security

Example prompts

  • “/frontend-mobile-security-xss-scan”

Requirements

  • Node.js

Workflow steps

6 steps, taken from the step headings in SKILL.md.

  1. XSS Vulnerability Detection
  2. Framework-Specific Detection
  3. Secure Coding Examples
  4. Automated Scanning Integration
  5. Report Generation
  6. Prevention Checklist

What it can do on your machine

Read from SKILL.md and the folder at commit 44923f3. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • npm
    • eslint
    • semgrep
    • node

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use npm, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Frontend Mobile Security Xss Scan loads about 2.4k tokens when it runs. Until then it costs about 59 tokens; SKILL.md has 336 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~59
When it runs · the whole SKILL.md, loaded when a task matches
~2.4k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 336 words (~2,405 tokens).

“You are a frontend security specialist focusing on Cross-Site Scripting (XSS) vulnerability detection and prevention. Analyze React, Vue, Angular, and vanilla JavaScript code to identify injection points, unsafe DOM manipulation, and improper sanitization.”

— opening of SKILL.md by aiskillstore
name
frontend-mobile-security-xss-scan
risk
unknown
source
community
date_added
2026-02-27

Read the full SKILL.md on GitHub

Files

SKILL.md and 1 other file in skills/sickn33/frontend-mobile-security-xss-scan of aiskillstore/marketplace.

  • SKILL.md
  • skill-report.json

Open the folder on GitHubat commit 44923f3

Used in 7 other repositories

We found 16 copies of this SKILL.md (exact, near-identical or edited) in other folders, from 7 other GitHub owners. This page covers the copy in aiskillstore/marketplace, which our catalogue first saw on October 7, 2026.

Compare with similar skills

Frontend Mobile Security Xss Scan next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Frontend Mobile Security Xss Scan compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Frontend Mobile Security Xss Scan this skillaiskillstore/marketplace4337 repos~2.4kAutomated safety check: PassNone
Read Docs And Interfacesghiscoding/slickgrid-universal177—~1kAutomated safety check: PassCustom licence
Creating Docs Code Exampleshandsontable/handsontable22k—~2.2kAutomated safety check: PassCustom licence
Golemuigolemui/golemui113—~2.2kAutomated safety check: PassMIT
Igniteui Wc Integrate With FrameworkIgniteUI/igniteui-webcomponents170—~1.4kAutomated safety check: PassMIT
Migrate Webapi Selectallmicrosoft/power-platform-skills984—~5.4kAutomated safety check: NotesMIT

Similar skills

  • Read Docs And Interfaces

    ghiscoding/slickgrid-universal

    Find the right SlickGrid documentation, interfaces, demos, and tests for a requested feature or API.

    177 GitHub stars~1k tokensUpdated 2 days ago
    DevelopmentAuto-check passed
  • Creating Docs Code Examples

    handsontable/handsontable

    Sets the rules for writing Handsontable documentation examples in JavaScript, TypeScript, React, Angular and Vue, with the imports, registration and licence key each needs.

    22k GitHub stars~2.2k tokensUpdated yesterday
    DevelopmentAuto-check passed
  • Golemui

    golemui/golemui

    Build, validate, and debug GolemUI forms in React, Angular, Vue, Lit, or vanilla JS.

    113 GitHub stars~2.2k tokensUpdated today
    Frontend & DesignAuto-check passed
  • Igniteui Wc Integrate With Framework

    IgniteUI/igniteui-webcomponents

    Install and integrate Ignite UI Web Components packages into React, Angular, Vue 3, LitElement, or vanilla JS/HTML apps, detecting the framework and applying framework-specific setup (package…

    170 GitHub stars~1.4k tokensUpdated yesterday
    Frontend & DesignAuto-check passed
  • Migrate Webapi Selectall

    microsoft/power-platform-skills

    Official

    Reviews and migrates deprecated wildcard () values in Power Pages Web API fields site settings to least-privilege explicit Dataverse columns.

    984 GitHub stars~5.4k tokensUpdated yesterday
    Frontend & DesignAuto-check: notes
  • Generate comprehensive release notes for Bit from git commits and pull requests.

    18k GitHub stars~2.2k tokensUpdated today
    DevelopmentAuto-check passed

More from aiskillstore/marketplace

All 1,040 skills in this repo
  • Code Stats

    aiskillstore/marketplace

    Analyze codebase with tokei (fast line counts by language) and difft (semantic AST-aware diffs).

    433 GitHub starsUsed in 1 repo~697 tokens
    Auto-check: notes
  • Data Processing

    aiskillstore/marketplace

    Process JSON with jq and YAML/TOML with yq. An agent skill from aiskillstore/marketplace.

    433 GitHub starsUsed in 1 repo~720 tokens
    Auto-check: notes
  • Doc Scanner

    aiskillstore/marketplace

    Scans for project documentation files (AGENTS.md, CLAUDE.md, GEMINI.md, COPILOT.md, CURSOR.md, WARP.md, and 15+ other formats) and synthesizes guidance.

    433 GitHub starsUsed in 1 repo~644 tokens
    Auto-check: notes
  • File Search

    aiskillstore/marketplace

    Modern file and content search using fd, ripgrep (rg), and fzf.

    433 GitHub starsUsed in 1 repo~598 tokens
    Auto-check: notes
  • Find Replace

    aiskillstore/marketplace

    Modern find-and-replace using sd (simpler than sed) and batch replacement patterns.

    433 GitHub starsUsed in 1 repo~527 tokens
    Auto-check: notes
  • Project Planner

    aiskillstore/marketplace

    Detects stale project plans and suggests session commands. An agent skill from aiskillstore/marketplace.

    433 GitHub starsUsed in 1 repo~504 tokens
    Auto-check passed

Categories

Questions about Frontend Mobile Security Xss Scan

What does Frontend Mobile Security Xss Scan do?

You are a frontend security specialist focusing on Cross-Site Scripting (XSS) vulnerability detection and prevention. Frontend Mobile Security Xss Scan is an agent skill from aiskillstore/marketplace. You are a frontend security specialist focusing on Cross-Site Scripting (XSS) vulnerability detection and prevention.

When should I use Frontend Mobile Security Xss Scan?

Frontend Mobile Security Xss Scan fits situations like: tasks that involve Web application vulnerabilities; tasks that involve Mobile application security.

How do I install Frontend Mobile Security Xss Scan in Claude Code?

Run `npx skills add aiskillstore/marketplace --skill frontend-mobile-security-xss-scan -a claude-code`. Or copy the skill folder (skills/sickn33/frontend-mobile-security-xss-scan in aiskillstore/marketplace) into .claude/skills/frontend-mobile-security-xss-scan in your project. Claude Code loads it when a task matches its description.

How do I install Frontend Mobile Security Xss Scan in Codex?

Run `npx skills add aiskillstore/marketplace --skill frontend-mobile-security-xss-scan -a codex`. Or copy the skill folder (skills/sickn33/frontend-mobile-security-xss-scan in aiskillstore/marketplace) into .agents/skills/frontend-mobile-security-xss-scan in your project. Codex loads it when a task matches its description.

Can I use Frontend Mobile Security Xss Scan in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add aiskillstore/marketplace --skill frontend-mobile-security-xss-scan -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/frontend-mobile-security-xss-scan, .gemini/skills/frontend-mobile-security-xss-scan, .github/skills/frontend-mobile-security-xss-scan and .opencode/skills/frontend-mobile-security-xss-scan in your project.

What does Frontend Mobile Security Xss Scan need to run?

Going by SKILL.md and its folder, Frontend Mobile Security Xss Scan needs the command-line tools its instructions call (npm, eslint, semgrep and node). Our summary lists: Node.js.

Does Frontend Mobile Security Xss Scan access the network?

SKILL.md contains no URLs. Its commands use npm, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Frontend Mobile Security Xss Scan safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Frontend Mobile Security Xss Scan use?

No licence was found for Frontend Mobile Security Xss Scan or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does Frontend Mobile Security Xss Scan use?

About 2.4k tokens (SKILL.md is roughly 9.6k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Frontend Mobile Security Xss Scan?

Skills that share tags, products or a category with Frontend Mobile Security Xss Scan: Read Docs And Interfaces (ghiscoding/slickgrid-universal, 177 stars), Creating Docs Code Examples (handsontable/handsontable, 22k stars), Golemui (golemui/golemui, 113 stars) and Igniteui Wc Integrate With Framework (IgniteUI/igniteui-webcomponents, 170 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Frontend Mobile Security Xss Scan?

aiskillstore (a GitHub organization) maintains it in aiskillstore/marketplace, which has 433 GitHub stars. The repository holds 1,044 skills in this directory. The repository was last updated on October 10, 2026.

Source: aiskillstore/marketplace on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.