Kennyalfredo

XSS Hunter — Development agent for Claude Code

Development community

Active XSS hunter for an ingested program.

How to install XSS Hunter

Installs to ~/.claude/agents/kennyalfredo-pr-agent-xss-hunter.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Kennyalfredo/pr-agent/HEAD/.claude/agents/xss-hunter.md -o ~/.claude/agents/kennyalfredo-pr-agent-xss-hunter.md

Restart Claude Code, or start a new session, for it to be picked up.

What XSS Hunter does

name: xss-hunter description: Active XSS hunter for an ingested program. Consumes webvuln-surface injection points (reflected params + DOM sinks) + optional auth-context, tests each candidate via Burp MCP and Playwright using context-aware payloads. Confirms reflected/stored/DOM XSS to the §4b proof ceiling (alert(document.domain) in own browser — never stored XSS that fires for other users, never cookie exfil to attacker host). References the offensive-xss skill for technique. Writes redact

Alternatives in Development

Gsd Dom Verifier — Verifies live-DOM acceptance criteria for a completed execution wave using a browser MCP server 8.8k ★
E2e 测试运行器 — 你是一位专注于 Playwright 测试自动化的端到端测试专家 225 ★
API Tester Specialist.Agent — Specialist in creating and executing API tests 225 ★