id = "sec-005"
title = "Detect XSS Vulnerabilities in HTML Templates"
domain = "security"
level = "L2"
description = "Analyze HTML template files for cross-site scripting vulnerabilities including unescaped variables and inline JavaScript injection points"
timeout = 180
capabilities = ["file-read", "file-write"]
skills_allowed = true
tags = ["xss", "web-security", "templates", "defensive"]
capability_types = ["reasoning", "tool-use"]
