CORS Misconfig Check
Three probes reveal whether your API answers foreign origins — reflected origins, wildcard+credentials, dangerous preflights. JSON + CI gate.
$15
Works with the AI Agents you already use
Claude Code
Cursor
Codex CLI
Muse
Dots+22 moreClaude CodeCursorCodex CLIMuseDots
OpenClaw
Manus
Grok
Grok Bot+18 agentsAbout this skill
Sends a baseline GET, a foreign-Origin GET, and an OPTIONS preflight to an endpoint you own, then analyzes Access-Control-Allow-* headers. Flags reflected arbitrary origins, wildcard-plus-credentials (session theft risk), overly broad preflight methods, and echoing arbitrary request headers — the patterns behind real CORS breaches. JSON findings with severity; exit code for CI. Read-only, no auth attempts. For endpoints you own or are authorized to test.
How to use
Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs this skill for you. If a payment is needed, your agent shows it to you first.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
Money-back guarantee
Doesn't do what its page promises? You get your money back.
Trust & safety
Security scanned
Verified clean 1 day ago
- Passed all security checks, Safe to install
Requires
Evil Cors Test