Cross-Site Scripting (XSS) Audit (offensive-xss)

Authorization & Scope Notice: This skill is part of the REA_Skill + claude-red Unified Security & Reverse Engineering Suite. It is designed strictly for authorized security assessments, defensive architecture reviews, vulnerability triage, bug bounty verification, and remediation engineering on software, infrastructure, and assets you own or have explicit permission to test.

Overview

Cross-site scripting (XSS) assessment methodology covering reflected, stored, DOM-based, and mutation XSS (mXSS), sink/source taint tracking, template context escaping, sanitizer bypass analysis, and Content-Security-Policy (CSP) hardening. Use when auditing frontend rendering, DOM sinks, rich-text sanitizers, or HTML output encoding.

Operational Workflow