Xss

v1.0.0

Xss reference tool. Use when working with xss in devtools contexts.

0· 86·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (Xss reference for devtools) match the actual content: a local CLI-style reference implemented as a shell script that prints documentation. Nothing requested is disproportionate to providing a reference tool.
Instruction Scope
SKILL.md instructs running the included scripts/script.sh commands. The script only outputs static documentation (heredocs); it does not read files, access environment variables, or send data externally.
Install Mechanism
No install spec provided (instruction-only). The only code is a benign shell script included in the skill bundle — nothing is downloaded or extracted at install time.
Credentials
The skill declares no required environment variables, credentials, or config paths and the script does not reference any external secrets or environment variables.
Persistence & Privilege
always is false and the skill does not request persistent system changes or modify other skills/configuration. It simply exposes local help commands.
Assessment
This skill appears to be a harmless local reference implemented as a shell script that prints documentation. If you plan to install or run it, you can inspect the included scripts/script.sh (already reviewed here) to confirm no network calls or secret usage. As with any third‑party code, only run it in environments where you trust the source; if you need absolute assurance, run it in an isolated shell or container. Note: there are minor non-security issues (e.g., some heredocs use single quotes which prevent variable expansion), but nothing that affects safety.

Like a lobster shell, security has layers — review code before you run it.

latestvk978xnsgbxk82nbemzfwe9jht983f8xv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments