It detects the framework (Next.js next.config.js headers/middleware.ts, Laravel SecurityHeaders middleware, Express helmet, Django SECURE_* settings), checks the current configuration against best practice, generates a framework-specific fix, and validates the headers are properly set.

Security Headers Skill

Overview

Audit and configure HTTP security headers for web applications.

Required Headers