Content Security Scan
Identifies potential vulnerabilities like malware, phishing links, and sensitive data exposure within uploaded content.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add content-security-scan npx -- -y @trustedskills/content-security-scan
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"content-security-scan": {
"command": "npx",
"args": [
"-y",
"@trustedskills/content-security-scan"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
The content-security-scan skill analyzes web page content to identify potential security vulnerabilities. It assesses for common issues like cross-site scripting (XSS), SQL injection, and other risks related to user-supplied data or external resources. The scan provides a report detailing identified vulnerabilities and suggestions for remediation.
When to use it
- Auditing new websites: Before launching a website, use this skill to proactively identify and fix security flaws.
- Analyzing competitor sites: Evaluate the security posture of competing websites (use responsibly).
- Investigating user-reported issues: Quickly assess potential vulnerabilities when users report suspicious behavior or errors.
- Regular Security Checks: Schedule periodic scans to ensure ongoing protection against evolving threats.
Key capabilities
- Vulnerability identification
- XSS detection
- SQL injection assessment
- Report generation
- Remediation suggestions
Example prompts
- "Scan the website
https://example.comfor security vulnerabilities and provide a report." - “Analyze this HTML content:
<script>alert('XSS')</script>and identify any potential risks.” - "Perform a content-security scan on
https://blog.trustedskills.aifocusing on XSS vulnerabilities."
Tips & gotchas
The skill's effectiveness depends on the accuracy of its analysis; complex or obfuscated code might require manual review alongside the automated scan results. Ensure you have permission to scan websites, especially those not owned by your organization.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.