FreeSkills
Commits, branches and sync with the but CLI
- 361361 downloads
- 198198 likes
- 103103 saves
Works with
- Claude Code
- Codex
- Cursor
- and 3 more
HTML injection testing: method and prevention v1.0.0
Use this resource to test a web application for HTML injection within an authorized scope
New
- 455 downloads
- 125 likes
- 208 saves
Free
Install with the CLI
In a terminal, from the folder you want:
npx --yes palatekit@latest install html-injection-test-methodologyWith no option, the skill goes to ~/.agents/skills/; add --agent claude-code (or codex, cursor…) to target an agent.
First time: connect the CLI with
npx --yes palatekit@latest loginThe agent follows a multi-phase audit method: finding injection points, basic tests, injection types, then correction measures. The phases also cover impersonation and defacement scenarios, to be used only on applications you are authorized to test.
Mostly picked by
Updated November 2, 2026
Previews
Details
- Install guides
- Generates with
- Your agent's model
- Licence
- MIT
Similar resources
View all- Free
FreeSkills
Sentry CLI guide
- 525525 downloads
- 117117 likes
- 128128 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Drizzle ORM best practices with PostgreSQL
- 407407 downloads
- 194194 likes
- 151151 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
SLO design wizard
- 537537 downloads
- 105105 likes
- 242242 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
User stories and sprint fit
- 451451 downloads
- 150150 likes
- 132132 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Capacity-based sprint plan
- 423423 downloads
- 192192 likes
- 102102 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Startup CTO advisor
- 580580 downloads
- 201201 likes
- 242242 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Creating GitHub pull requests with quality checks
- 427427 downloads
- 230230 likes
- 196196 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
What you get
- SKILL.md: objective, prerequisites and phase order
- sub-skills/phase-2-identifying-injection-points.md: finding injection points
- sub-skills/phase-10-prevention-and-remediation.md: prevention and remediation
Good fit for
- You are preparing an authorized security audit of your application
- You want to check that an input field does not render raw HTML
Not for
Tags
- security
- html injection
- audit
- prevention
About
You say
“Review the comment form on my site and point out where raw HTML is not escaped, as part of my authorized audit.”
Skill published by dokhacgiakhoa under the MIT license, delivered in its original version.
Show moreShow less
How to use it
- Install the skill in your agent's skills folder
- Ask your agent to test a web application for HTML injection within an authorized scope
- Review and adjust the result
Content preview
Files
- LICENSE2.4 KB
- NOTICE-PALATEKIT.md0.5 KB
- SKILL.md2.2 KB
- sub-skills/attack-limitations.md0.2 KB
- sub-skills/common-test-payloads.md0.3 KB
- sub-skills/encoding-types.md0.2 KB
- sub-skills/injection-contexts.md0.3 KB
- sub-skills/phase-1-understanding-html-injection.md0.7 KB
- sub-skills/phase-10-prevention-and-remediation.md1 KB
- sub-skills/phase-2-identifying-injection-points.md0.5 KB
- sub-skills/phase-3-basic-html-injection-testing.md0.9 KB
- sub-skills/phase-4-types-of-html-injection.md1.5 KB
- sub-skills/phase-5-phishing-attack-construction.md1.5 KB
- sub-skills/phase-6-defacement-payloads.md0.8 KB
- sub-skills/phase-7-advanced-injection-techniques.md1 KB
- sub-skills/phase-8-bypass-techniques.md0.5 KB
- sub-skills/phase-9-automated-testing.md1.3 KB
- sub-skills/required-knowledge.md0.4 KB
- sub-skills/required-tools.md0.1 KB
- sub-skills/severity-assessment.md0.6 KB
- sub-skills/testing-considerations.md0.2 KB
Origin and licence
Listed unmodified
- Author
- dokhacgiakhoa
- Source
- github.com/dokhacgiakhoa/agent-skills-4-vibe-coding-cli/tree/c4a059bbf7a8d6b2162071f0fbfe74053faa6d20/.agent/skills/html-injection-testing
- Licence
- MIT
Notice
« HTML Injection Testing » (dokhacgiakhoa, MIT) livré dans sa version d'origine : fiche en français et en anglais par PalateKit.
User reviews
–
No ratings yet
Loading reviews…