mutation-xss-anti-pattern
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill serves as educational documentation for developers and AI agents to understand and prevent Mutation XSS (mXSS) vulnerabilities.\n- [SAFE]: Includes a 'BAD' code example to illustrate how naive sanitizers can be bypassed, which is a standard pedagogical approach in security training.\n- [SAFE]: Recommends industry-standard practices, such as using the DOMPurify library and implementing Content Security Policy (CSP), to mitigate risks.\n- [SAFE]: All external links point to established security organizations (OWASP, MITRE, PortSwigger) or reputable open-source projects (DOMPurify, sec-context).
Audit Metadata