content-security-policy
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is to enhance web security by providing guidelines for implementing Content Security Policies and HTML sanitization. The instructions align with industry best practices from OWASP and MDN.- [EXTERNAL_DOWNLOADS]: The skill references several well-known and trusted security resources, including Google's CSP Evaluator, Mozilla Observatory, and Security Headers. These are used purely for diagnostic and verification purposes.- [COMMAND_EXECUTION]: Provides a benign curl command (
curl -I) for inspecting HTTP response headers, which is a standard procedure for verifying server-side security configurations.- [DATA_EXPOSURE]: The skill handles security headers and provides code for generating nonces and logging CSP violations. These practices are documented as standard security controls and do not involve the exfiltration of sensitive information.
Audit Metadata