Detect CORS policy misconfigurations by testing Origin headers against API responses.
npx skills add https://github.com/woohyun212/security-skill --skill cors-check
Please help me install this Agent Skill. Skill: cors-check Source: https://github.com/woohyun212/security-skill/tree/main/cors-check Command: npx skills add https://github.com/woohyun212/security-skill --skill cors-check
CORS misconfigurations in APIs can enable unauthorized access or data leakage. This skill tests how an API responds to a variety of Origin headers to determine whether cross-origin access controls are correctly enforced.
Provide a target URL and run the cors-check skill to assess its CORS policy.
High-intent search queries and answers about installing and using this skill.
This skill detects CORS policy misconfigurations by sending controlled requests with various Origin headers to your API and interpreting the Access-Control headers in the response to categorize risk levels.
Origin reflection is a CORS misconfiguration where the API reflects the request's Origin header in the Access-Control-Allow-Origin response, enabling unauthorized cross-origin access and credential leakage risks.
You can test for wildcard origins with credentials by sending controlled requests to the target URL and interpreting the Access-Control headers in the response to identify this unsafe configuration and assess credential leakage risks.
Yes, this skill detects null origin vulnerabilities by testing various Origin headers, including null, against your API endpoints and interpreting the Access-Control response headers to assess the risk level.
The best way to assess Access-Control headers is to send controlled requests with various Origin headers and interpret the responses to categorize risk levels and provide remediation guidance for detected CORS misconfigurations.
Yes, this skill provides remediation guidance and risk assessment by categorizing risk levels for detected CORS misconfigurations like origin reflection and wildcard origins with credentials, and offering actionable advice to improve API security.
flanksourceDiagnose Mission Control health check failures by analyzing configurations and failure patterns.
hjemmesidekongenEnforce API security with rate limiting, input validation, and security headers.
sseshachalaIdentifies misconfigured CORS policies that allow credential abuse via header analysis.
oguzhan18Manage Angular HTTP requests, interceptors, error handling, and cancellation.
