Does this skill support wildcard origins?

While it can use them in development for convenience, the skill enforces a security-first approach that prohibits wildcard origins in production environments.

Which backend frameworks are compatible?

The skill currently provides specialized configuration patterns for .NET (ASP.NET Core) and Python (FastAPI).

How does it handle production origins?

It configures the application to retrieve allowed origins from environment variables (.env) or appsettings.json, ensuring production URLs are never hardcoded.

Does it verify the configuration after implementation?

Yes, the skill includes validation steps such as syntax checks and curl-based preflight request testing to ensure the headers are being served correctly.

Can it detect my frontend automatically?

Yes, it scans the project structure for common directories like /frontend or /client and identifies default ports for React, Vite, Angular, and Next.js.

CORS Policy Configurator

Name: CORS Policy Configurator
Author: levnikolaevich

bylevnikolaevich

•

API開発

Configures secure, environment-specific Cross-Origin Resource Sharing (CORS) policies for .NET and Python web applications.

概要

The CORS Policy Configurator is a specialized worker skill designed to automate the setup of cross-origin security policies with a production-first mindset. It intelligently detects frontend frameworks like React, Vite, and Angular to suggest local development origins while enforcing strict, environment-driven whitelisting for production. By supporting both .NET (ASP.NET Core) and Python (FastAPI), it ensures consistent security patterns across different technology stacks, handling complex configurations like credential support and preflight caching automatically.

主な機能

Environment-aware configuration for Development vs. Production
38 GitHub stars
Automatic detection of frontend frameworks and local dev ports
Multi-stack support for ASP.NET Core and FastAPI middleware
Security-first validation preventing production wildcard origins
Built-in testing via preflight request verification scripts

ユースケース

Configuring credential-based authentication for cross-domain API requests
Bootstrapping a new API that needs to communicate with a separate frontend application
Hardening production security by replacing loose CORS policies with environment-driven whitelists

概要

主な機能

Environment-aware configuration for Development vs. Production
38 GitHub stars
Automatic detection of frontend frameworks and local dev ports
Multi-stack support for ASP.NET Core and FastAPI middleware
Security-first validation preventing production wildcard origins
Built-in testing via preflight request verification scripts

ユースケース

Configuring credential-based authentication for cross-domain API requests
Bootstrapping a new API that needs to communicate with a separate frontend application
Hardening production security by replacing loose CORS policies with environment-driven whitelists