validating-cors-policies

Quick Review

The skill provides a reasonable foundation for CORS policy validation with clear examples and workflow steps. The description adequately covers basic usage scenarios. However, the skill suffers from significant gaps: it references a 'cors-policy-validator plugin' that isn't defined or implemented anywhere, leaving the actual validation logic unclear. The taskKnowledge is moderate - it describes what should happen but lacks concrete implementation details or scripts for performing CORS analysis. The structure is acceptable with logical sections, though some generic security content appears copy-pasted. Novelty is limited since CORS validation can be reasonably accomplished by a CLI agent reading headers and applying known security rules without specialized tooling. The skill would benefit from either implementing actual validation logic/rules or providing specific criteria and checks for CORS misconfiguration detection.