csp
Content Security Policy configuration, nonces, and reporting.
npx skills add a5c-ai/babysitter --skill csp --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# CSP Skill Expert assistance for Content Security Policy implementation. ## Capabilities - Configure CSP headers - Implement nonces - Set up reporting - Handle inline scripts - Configure strict CSP ## CSP Configuration ```typescript // Next.js middleware const cspHeader = ` default-src 'self'; script-src 'self' 'nonce-${nonce}' 'strict-dynamic'; style-src 'self' 'nonce-${nonce}'; img-src 'self' blob: data:; font-src 'self'; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; report-uri /api/csp-report; `; ``` ## Target Processes - security-hardening - csp-implementation - xss-prevention
- Capabilities
- CSP Configuration
- Target Processes
What does the csp skill do?
Content Security Policy configuration, nonces, and reporting.
How do I install it?
Run `npx skills add a5c-ai/babysitter --skill csp --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.