The Agent Skills Directory

[SAFE]: The skill serves as a legitimate technical guide for CORS configuration. All code examples (Express.js, Next.js, Fastify) demonstrate correct security implementations, including explicit origin checking, preflight (OPTIONS) handling, and proper usage of Access-Control-Allow-Credentials. It specifically warns against high-risk configurations like using a wildcard (*) with credentials. The origin validation logic in validator.ts uses safe regex and string comparison methods. No evidence of data exfiltration, command execution, or obfuscation was found.

cors-configuration