Secure Headers

STUB: This skill is not yet implemented

This placeholder preserves the documented plugin structure. See parent plugin README for planned capabilities.

Planned Capabilities

• Content-Security-Policy (CSP): Script, style, and resource origin restrictions
• HSTS: Strict-Transport-Security enforcement
• X-Frame-Options: Clickjacking prevention
• X-Content-Type-Options: MIME type sniffing prevention
• SameSite Cookies: CSRF protection via cookie attributes
• Framework-specific implementation guides (Next.js, Express, etc.)

Critical Pattern