Does this skill support wildcard origins?

While it can use them in development for convenience, the skill enforces a security-first approach that prohibits wildcard origins in production environments.

Which backend frameworks are compatible?

The skill currently provides specialized configuration patterns for .NET (ASP.NET Core) and Python (FastAPI).

How does it handle production origins?

It configures the application to retrieve allowed origins from environment variables (.env) or appsettings.json, ensuring production URLs are never hardcoded.

Does it verify the configuration after implementation?

Yes, the skill includes validation steps such as syntax checks and curl-based preflight request testing to ensure the headers are being served correctly.

Can it detect my frontend automatically?

Yes, it scans the project structure for common directories like /frontend or /client and identifies default ports for React, Vite, Angular, and Next.js.

CORS Policy Configurator

Name: CORS Policy Configurator
Author: levnikolaevich

bylevnikolaevich

•

API Development

Configures secure, environment-specific Cross-Origin Resource Sharing (CORS) policies for .NET and Python web applications.

The CORS Policy Configurator is a specialized worker skill designed to automate the setup of cross-origin security policies with a production-first mindset. It intelligently detects frontend frameworks like React, Vite, and Angular to suggest local development origins while enforcing strict, environment-driven whitelisting for production. By supporting both .NET (ASP.NET Core) and Python (FastAPI), it ensures consistent security patterns across different technology stacks, handling complex configurations like credential support and preflight caching automatically.

Key Features

01Environment-aware configuration for Development vs. Production

0238 GitHub stars

03Automatic detection of frontend frameworks and local dev ports

04Multi-stack support for ASP.NET Core and FastAPI middleware

05Security-first validation preventing production wildcard origins

06Built-in testing via preflight request verification scripts

Use Cases

01Configuring credential-based authentication for cross-domain API requests

02Bootstrapping a new API that needs to communicate with a separate frontend application

03Hardening production security by replacing loose CORS policies with environment-driven whitelists

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add levnikolaevich/claude-code-skills ln-773-cors-configurator

For use in Claude.ai and ChatGPT

Download Skill