skill-actions-security-fixture

Enforce same-origin, method, and body size constraints on action requests.

Updated Feb 2, 2026

Search Tags:#plugin testing #same-origin #action validation #request body limit #security fixture #http method allowlist

Ready to run

npx skills add https://github.com/Agent-Town/Portal --skill skill-actions-security-fixture

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: skill-actions-security-fixture
Source: https://github.com/Agent-Town/Portal/tree/main/public/fixtures/skill-actions-security
Command: npx skills add https://github.com/Agent-Town/Portal --skill skill-actions-security-fixture

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill fixture helps test and validate that action requests enforce security constraints like same-origin restrictions, allowed HTTP methods, and request body size limits.

Core Features & Use Cases

Cross-origin blocking: Ensures requests marked for same-origin enforcement cannot target external domains.
Method allowlisting: Blocks disallowed HTTP methods by enforcing an allowed methods list per action.
Request body size limiting: Verifies that oversized request bodies are rejected according to a configured maximum size.
Use Case: Use it in automated plugin/agent security guard tests to confirm policy enforcement before deploying new action handlers.

Quick Start

Run a plugin or test suite that consumes this fixture to verify action requests against the configured sameOriginOnly, allowMethods, and maxBodyBytes rules.

Frequently Asked Questions about skill-actions-security-fixture

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I test that action requests enforce same-origin restrictions and allowed HTTP methods?▼

Test action request security enforcement by validating that cross-origin requests are blocked and disallowed HTTP methods are rejected using a security fixture. It provides deterministic request templates to verify same-origin and method allowlist policies.

What is a security fixture for plugin testing?▼

A security fixture for plugin testing is a tool that enforces security constraints on configured action requests by blocking disallowed origins, methods, and oversized payloads. It verifies policy enforcement before deploying new action handlers.

How do I verify request body size limits during action security testing?▼

Verify request body size limits by configuring a maxBodyBytes rule in your security fixture, which rejects oversized request payloads. This ensures your action handlers correctly enforce bounded payload handling.

Can I use this fixture to validate per-action security policies in automated tests?▼

Yes, you can use this fixture in automated plugin security guard tests to validate per-action security policies. It satisfies sameOriginOnly, allowMethods, and maxBodyBytes requirements, providing deterministic templates for verification.

Does the action validation fixture support blocking cross-origin requests?▼

Yes, the action validation fixture supports cross-origin blocking by ensuring requests marked for same-origin enforcement cannot target external domains. This verifies that your same-origin access constraints are properly applied.

What are the limitations of testing action security constraints with a basic fixture?▼

Testing action security constraints with this basic fixture is limited to deterministic validation of same-origin, method allowlisting, and payload size rules. It does not support complex dynamic threat simulation or authentication testing.