The Agent Skills Directory

[SAFE]: The skill acts as a security methodology guide for detecting CORS misconfigurations. It provides instructions on how to evaluate response headers like Access-Control-Allow-Origin and Access-Control-Allow-Credentials to determine risk.
[SAFE]: The code snippets provided (e.g., fetching data and sending it to http://evil.com) are standard educational examples used in web security testing to demonstrate how a vulnerability could be exploited by a malicious actor. They do not represent malicious code executed by the skill itself.
[SAFE]: No obfuscation, unauthorized credential access, persistence mechanisms, or privilege escalation attempts were found. The skill operates within the expected scope of a penetration testing or security research tool.

cors-misconfiguration