skill-actions-security-fixture

What problem does it solve?

This Skill fixture helps test and validate that action requests enforce security constraints like same-origin restrictions, allowed HTTP methods, and request body size limits.

Core Features & Use Cases

• Cross-origin blocking: Ensures requests marked for same-origin enforcement cannot target external domains.
• Method allowlisting: Blocks disallowed HTTP methods by enforcing an allowed methods list per action.
• Request body size limiting: Verifies that oversized request bodies are rejected according to a configured maximum size.
• Use Case: Use it in automated plugin/agent security guard tests to confirm policy enforcement before deploying new action handlers.

Quick Start

Run a plugin or test suite that consumes this fixture to verify action requests against the configured sameOriginOnly, allowMethods, and maxBodyBytes rules.