CSP Skill

SkillSecurity

Content Security Policy configuration, nonces, and reporting.

Instructions available. Your AI can read the instructions. Execution depends on the setup they require.

Account requirements not reviewed. Check the skill instructions before use; ahel provides instructions and does not run this skill.

Add ahel to your AI once: Claude, ChatGPT, Cursor, Claude Code or Codex. Then ask it to use this.

Then ask your AI: use the CSP Skill skill

What this skill tells your AI

The instructions your AI receives, as published by a5c-ai/babysitter in library/specializations/web-development/skills/csp/SKILL.md and read by ahel’s review.

Expert assistance for Content Security Policy implementation.

Capabilities

Configure CSP headers
Implement nonces
Set up reporting
Handle inline scripts
Configure strict CSP

CSP Configuration

// Next.js middleware
const cspHeader = `
  default-src 'self';
  script-src 'self' 'nonce-${nonce}' 'strict-dynamic';
  style-src 'self' 'nonce-${nonce}';
  img-src 'self' blob: data:;
  font-src 'self';
  connect-src 'self';
  frame-ancestors 'none';
  base-uri 'self';
  form-action 'self';
  report-uri /api/csp-report;
`;

Target Processes

security-hardening
csp-implementation
xss-prevention

Signals

GitHub stars: 2k
Forks: 112
Last commit: Sep 2026

Advanced

Item type: skill
Key: csp
Source: github.com/a5c-ai/babysitter

github.com/a5c-ai/babysitter