Psylch Cors Audit Skill
- Updated February 25, 2026
- psylch/cors-audit-skill
cors-audit is a Claude Code skill marketplace plugin that audits end-to-end CORS across gateways, backends, and frontends with automated Python validation.
About
psylch-cors-audit-skill is a Claude Code marketplace plugin for architecture-level CORS reviews. Unlike single-file config linters, it traces the full request path to catch duplicate headers from gateways plus backends and micro-frontend embedding pitfalls. Use it when browsers block credentialed calls or micro-apps fail in production and you need systematic validation across layers.
- Six-phase CORS walkthrough spanning gateway, backend, and frontend
- Detects duplicate Access-Control-Allow-Origin from stacked proxies
- Covers Caddy, nginx, Qiankun micro-frontends, and multi-origin APIs
- Bundled Python script validates live endpoints and static configs
Psylch Cors Audit Skill by the numbers
- Data as of Jul 7, 2026 (Skillselion catalog sync)
/plugin marketplace add psylch/cors-audit-skillAdd your badge
Show developers this marketplace is listed on Skillselion. Paste this into your README.
| Last updated | February 25, 2026 |
|---|---|
| Repository | psylch/cors-audit-skill ↗ |
Why do browsers still fail CORS after each layer looks correct in isolation?
Run layered CORS audits across gateway, backend, and frontend with a bundled Python validator for live endpoints.
Who is it for?
Full-stack engineers debugging multi-tier web apps with reverse proxies, micro-frontends, or dynamic origin APIs.
Skip if: Static sites with no cross-origin API calls or teams that only need a single nginx snippet without path tracing.
What you get
A structured audit report and script validation output highlighting conflicts, unsafe combinations, and layer-specific fixes.
Plugins in this marketplace
1 plugin - install individually after you add the marketplace.
Recommended Marketplaces
FAQ
What layers does the skill inspect?
README and manifest emphasize gateway, backend, and frontend paths including micro-app architectures.
How is validation automated?
A bundled Python script tests live endpoints and static configuration files as described in the README table.
What common bug is highlighted?
Documentation calls out duplicate Access-Control-Allow-Origin when both gateway and backend set headers.