Stats
Actions
Tags
From web-security
Query jxscout for asset relationships -- which JS files and iframes a page loads, lazy-loaded chunks, reversed source maps, and how assets relate to each other. Use when mapping the attack surface of a specific page or understanding how assets are connected.
How this skill is triggered — by the user, by Claude, or both
Slash command
/web-security:jxscout-relationshipsThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
jxscout tracks how web assets relate to each other: which JS files an HTML page loads, which iframes it embeds, which chunks were discovered from a script, and which source maps were reversed. Use these commands to map the attack surface of a specific page or trace how assets are connected.
jxscout tracks how web assets relate to each other: which JS files an HTML page loads, which iframes it embeds, which chunks were discovered from a script, and which source maps were reversed. Use these commands to map the attack surface of a specific page or trace how assets are connected.
The JXSCOUT_PROJECT_NAME environment variable must be set. All commands use jxscout-pro-v2 -c (client mode).
jxscout-pro-v2 -c get-loaded-js-files <url_or_path> [--include-reversed-sources] [--json]
Lists all JS files loaded by an HTML page. Pass either the URL or the local file path.
--include-reversed-sources -- also include file paths of reversed source map files--json -- structured output with js_files and optionally reversed_sources arraysThis is useful for scoping your analysis to the JS that actually runs on a specific page, rather than searching the entire project.
jxscout-pro-v2 -c get-js-file-loader-page <url_or_path> [--json]
Returns the HTML page(s) that load a given JS file. This is the reverse of get-loaded-js-files. Pass either the URL or the local file path of the JS file.
Also works with reversed source files -- it follows the chain (reversed source -> source map -> JS file) to find the pages that load the original JS file the reversed source was extracted from.
--json -- structured output with a loader_pages arrayThis is useful for impact assessment: given a JS file with a vulnerability or interesting code, find which pages are affected.
jxscout-pro-v2 -c get-loaded-iframes <url_or_path> [--json]
Lists all iframes embedded by an HTML page. Relevant for:
get-loaded-js-files to see what JS runs on a specific pageget-loaded-iframes to understand cross-origin framingget-js-file-loader-page to find which pages load a specific JS file or reversed source -- useful when you find something interesting and need to know the affected pagesget-js-file-loader-page to determine which pages are affected and prioritize accordinglynpx claudepluginhub s3cr1z/capabilities --plugin web-securityProvides CDSS development patterns for drug interaction checking, dose validation, clinical scoring (NEWS2, qSOFA), and alert classification integrated into EMR workflows.