# Csp Gen

> Generate Content Security Policy headers from your codebase

- Skill: `modbender/csp-gen` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add modbender/csp-gen`
- Raw SKILL.md: https://api.skillmd.com/api/skills/modbender/csp-gen/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: modbender (https://skillmd.com/u/modbender)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/modbender/csp-gen

---


# CSP Generator

Scan your app and generate a proper Content Security Policy. Stop breaking your site with overly strict rules.

## Quick Start

```bash
npx ai-csp ./src
```

## What It Does

- Scans for external resources (scripts, styles, images)
- Identifies inline scripts that need hashes
- Generates a working CSP header
- Explains each directive

## Usage Examples

```bash
# Scan and generate CSP
npx ai-csp ./public ./src

# Generate for specific strictness
npx ai-csp ./src --strict

# Output as meta tag
npx ai-csp ./src --format meta
```

## Output Formats

- HTTP header format
- HTML meta tag
- Next.js config
- Nginx config snippet

## Requirements

Node.js 18+. OPENAI_API_KEY required.

## License

MIT. Free forever.

---

**Built by LXGIC Studios**

- GitHub: [github.com/lxgicstudios/ai-csp](https://github.com/lxgicstudios/ai-csp)
- Twitter: [@lxgicstudios](https://x.com/lxgicstudios)