Works with the AI tools you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIGitHub CopilotGitHub CopilotGemini CLIGemini CLI+17 more

    Repair Cookie Scope Leakage

    1

    Repair cookie scope leaks caused by incorrect Domain, Path, Secure, SameSite, host-only, public-suffix, port, or redirect handling.

    $8.99

    30-day refund guarantee

    Secure checkout via Stripe

    0 installsSecurity scanned

    See it in action

    You say

    Our Python SDK cookie jar treats host-only cookies as Domain cookies and matches Path with startswith, so /app cookies leak to /application and sibling subdomains. Repair with local fake requests. Preserve expiry, SameSite, Secure, redirect, and session behavior; never log cookie values.

    Your agent does

    Cookie authority defect found. Storage loses the host-only flag and request matching uses raw string prefixes, widening both domain and path scope. The repair preserves canonical scope metadata, applies directory-boundary path matching, keeps Secure/SameSite/expiry/session policy intact, and validates sibling domains, exact paths, deletion, redirects, and redacted telemetry without exposing cookie values.

    What you get

    Isolate host-only cookies from sibling subdomains in multi-tenant environments.Correct Path matching to prevent directory boundary traversal leaks.Ensure Secure cookies are never attached to plain HTTP requests.Repair session deletion logic to properly handle scope-specific removals.

    About this skill

    The problem

    Cookie storage and matching logic in custom SDKs or proxies often grant broader authority than the Set-Cookie contract allows. This leads to security leaks where host-only cookies are sent to subdomains or secure cookies leak over unencrypted channels.

    What it does

    • Identifies failures in host-only, Domain, and Path matching logic within the repository.
    • Patches Set-Cookie parsing to enforce canonical storage identity and public-suffix boundaries.
    • Fixes deletion logic where different scopes prevent session cleanup.
    • Corrects request attachment paths to prevent cookies from leaking to sibling tenants or parent domains.
    • Implements redacted observability and deterministic local fixtures for regression testing.

    Why this beats prompting it yourself

    Manual prompts often overlook the nuance between host-only and Domain-level cookies, leading to incomplete fixes that break session persistence. This skill enforces a strict canonical contract for normalization and validation, ensuring repairs align with browser-compatible security standards without leaking secrets in logs.

    Use cases

    • Preventing session cookies from leaking to sibling subdomains in multi-tenant apps.
    • Fixing broken cookie deletion logic caused by scope mismatches.
    • Enforcing Secure and SameSite attributes in custom proxy or client implementations.
    • Standardizing Path matching to prevent string prefix overlaps from leaking data.

    Known limitations

    Does not contact production services or read live secrets. Repository-level IDNA and public-suffix support depend on existing local libraries.

    How to install

    Drop the file into your AI Agent. Works with Claude, Cursor, ChatGPT, and 20+ more.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill passes our trust checks below.

    Security scanned

    Passed our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    30-day refund

    Not a fit? Get your money back

    Trust & safety

    Security scanned

    Verified clean today

    • One-time purchase, yours forever

    Listedtoday

    Frequently Asked Questions