Domxss

Description

--- description: Confirm DOM XSS in a real headless browser — injects canary payloads into params + URL fragment and only reports when the browser actually executes them. Usage: /domxss "<url>" [--params q,name] [--shot out.png] --- # /domxss Reflected-XSS scanners see a payload echoed back in HTML but can't tell whether it *ran* — CSP, framework auto-escaping, or a sink that never reaches `eval`/`innerHTML` all silently kill it. This drives headless Chromium, fires a uniquely-tagged payload t

Installation

Installs to ~/.claude/skills/awarexone-agentic-bug-hunter-domxss/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.