cors-auditor

@novacode37 · 收录于 1 周前

Audit a site's Cross-Origin Resource Sharing (CORS) configuration for misconfigurations — wildcard origin with credentials, reflected arbitrary Origin, the 'null' origin, overly broad allowed methods, and risky credentialed CORS. Use when the user asks to "check my CORS config", "is my API's CORS safe", "test for CORS misconfiguration", or "why can any site call my API".

场景安全审计上线前检查 api安全

适合你，如果你需要确保API的跨域配置没有安全风险

/ 下载安装

https://github.com/NovaCode37/claude-security-skills/tree/main/skills/cors-auditor ↗

/ 通过 npx 安装 校验哈希

npx oh-my-skill add novacode37/claude-security-skills/cors-auditor

/ 通过 bash 安装

curl -fsSL https://oh-my-skill.com/install.sh | bash -s -- novacode37/claude-security-skills/cors-auditor

/ 已经装过?验证本机副本,不用重装

npx oh-my-skill verify novacode37/claude-security-skills/cors-auditor

安装目标可用 --agent / --scope 或 --to 明确指定;省略时只会在唯一已存在的 agent 目录上自动选择,零命中或多命中会停止并提示。content_hash 缺失或不一致均拒装。

11GitHub stars

~497最小装载

~497含声明引用

~2.2K文本包总量

索引托管

登录即可评论;带「已验证安装」的,是发布者名下有本店的安装或持有记录。

…