Hunt Xss

Description

--- description: Active XSS hunt for an ingested program. Consumes webvuln-surface seeds (reflected params + DOM sinks) + optional auth-context, tests each injection point via Burp + Playwright using context-aware payloads. Confirms reflected/stored/DOM XSS to the proof ceiling (alert(document.domain) in own session — never stored XSS for other users, never cookie exfil). Writes redacted candidates; does not verify ownership or draft. argument-hint: <program-slug> allowed-tools: Agent --- You a

Installation

Installs to ~/.claude/commands/kennyalfredo-pr-agent-hunt-xss.md

Restart Claude Code, or start a new session, for it to be picked up.