OpenAgentSkill Registry Manifest
Skill: hunt-cors
Slug: elementalsouls-hunt-cors
Category: data-analysis
Description: Hunt CORS Misconfiguration — origin-reflection with credentials, null-origin trust, subdomain-regex bypass (unanchored vs unescaped-dot vs prefix-only), pre-flight (OPTIONS) gating bypass, postMessage origin checks. High only when an attacker-controlled origin can perform a CREDENTIALED cross-origin read of sensitive data and you have proven it in a browser. Use when testing API endpoints, SPAs, or any app emitting Access-Control-* headers.

Agent fit:
- Decision: 94/100 Production-ready
- Primary fit: Browser automation
- Role: Primary pick

Supply profile:
- Track: Coding and developer agents
- Scenario: Testing and QA
- Applicable agents: Claude Code, Browser agents, CLI, Codex, Cursor
- Maintenance: 6d since push
- Risk: Needs review

Trust:
- Trust score: 77/100 Strong shortlist
- Audit: 83/100 Needs review

Attribution:
- Status: Registry indexed
- Source: github candidate review
- Creator: elementalsouls
- Claim URL: https://www.openagentskill.com/skills/elementalsouls-hunt-cors#claim-this-skill

Install:
npx skills add elementalsouls/Claude-BugHunter --skill hunt-cors

URLs:
- Web: https://www.openagentskill.com/skills/elementalsouls-hunt-cors
- API: https://www.openagentskill.com/api/agent/skills/elementalsouls-hunt-cors
- Install API: https://www.openagentskill.com/api/skills/elementalsouls-hunt-cors/install
- Repository: https://github.com/elementalsouls/Claude-BugHunter/tree/main/skills/hunt-cors