cors-configuration
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for implementing CORS. It includes examples for header configuration, preflight handling, and origin validation.
- [SAFE]: All identified dependencies (cors, helmet, @fastify/cors, supertest) are well-known, legitimate packages in the Node.js ecosystem.
- [SAFE]: The code snippets follow security best practices, such as explicitly advising against using wildcards with credentials and recommending strict origin validation.
- [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or persistence mechanisms was found.
Audit Metadata