The Agent Skills Directory

[SAFE]: The skill serves as an educational resource and audit tool for CORS configurations, identifying high-risk patterns such as the combination of wildcards and credentials.
[SAFE]: Code examples provided for TypeScript (Express) and Python (FastAPI) follow security best practices, including explicit origin allowlists and proper use of the Vary: Origin header.
[SAFE]: No commands for remote code execution, package installation, or unauthorized network access were found. The skill does not contain any obfuscated content or attempts at prompt injection.
[SAFE]: The checklist and regex examples for subdomain matching are technically sound and designed to prevent common configuration errors like insecure suffix matching.

cors-config