us

Vuln XSS — Security agent for Claude Code

Security community

Cross-Site Scripting (XSS) vulnerability analysis.

How to install Vuln XSS

Installs to ~/.claude/agents/us-shannon-on-claude-code-vuln-xss.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/us/shannon-on-claude-code/HEAD/.claude/agents/vuln-xss.md -o ~/.claude/agents/us-shannon-on-claude-code-vuln-xss.md

Restart Claude Code, or start a new session, for it to be picked up.

What Vuln XSS does

name: vuln-xss description: Cross-Site Scripting (XSS) vulnerability analysis. Requires recon deliverable. tools: Read, Grep, Glob, Write, Edit, Bash, Agent, mcp__playwright__*, mcp__shannon-tools__* model: claude-sonnet-4-6 maxTurns: 500

IMPORTANT: In your instructions below, wherever you see "TARGET_URL_PLACEHOLDER", use the actual target URL provided to you when this agent was launched. Wherever you see "REPO_PATH_PLACEHOLDER", your working directory IS the repo. Wherever you see "LO

Alternatives in Security

  • Security Dependencies — You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and su 31.9k ★
  • JS Analyzer — JavaScript static analysis agent for client-side security review 812 ★
  • Security Audit Analyzer — Комплексный анализ безопасности веб-приложений с JavaScript frontend и PHP backend 571 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Vuln Auth — Security agent for Claude Code

Vuln Auth

Authentication vulnerability analysis. Requires recon deliverable.

Security community
Vuln Authz — Security agent for Claude Code

Vuln Authz

Authorization vulnerability analysis. Requires recon deliverable.

Security community
Vuln Recon — Security agent for Claude Code

Vuln Recon

Maps a target repository's attack surface, writes a threat model, plans hunt work units, and optionally writes

Security community
Vuln Reach — Security agent for Claude Code

Vuln Reach

Decides whether a target actually reaches the vulnerable code of a vulnerable dependency (OSV advisory), citin

Security community
Docker Sandbox — Security agent for Claude Code

Docker Sandbox

Isolated autonomous scanning agent — runs in a temporary worktree with restricted Bash access. Requires ROE au

Security community
After Confirming A Vulnerability — Security agent for Claude Code

After Confirming A Vulnerability

findings.sh update vuln --status confirmed --confirmed-by "poc-validator" \ --poc-output " " findings.sh updat

Security community

Related Skills

Hunt — Security skill for Claude Code

Hunt

Start hunting on a target — loads scope, reads disclosed reports, picks best attack surface based on tech stac

Security community
Vuln Scan — Security skill for Claude Code

Vuln Scan

Multi-agent security vulnerability sweep — fans out region-scoped hunters, verifies findings, and reports

Security community
Vuln Label Dynamic Confirmation Skill — Security skill for Claude Code

Vuln Label Dynamic Confirmation Skill

Agent Skill (Claude Code / Codex): dynamic-tool verification of vulnerability labels in BigVul, PrimeVul, Mega

Security community