security-headers
Installation
SKILL.md
Security Headers Validation
I'll analyze and implement web security headers (CSP, HSTS, X-Frame-Options, etc.) to protect against common attacks.
Arguments: $ARGUMENTS - URL to check, or framework for configuration generation
Security Headers Overview
Essential Headers:
- Content-Security-Policy (CSP) - Prevent XSS and injection attacks
- Strict-Transport-Security (HSTS) - Enforce HTTPS
- X-Frame-Options - Prevent clickjacking
- X-Content-Type-Options - Prevent MIME sniffing
- Referrer-Policy - Control referrer information
- Permissions-Policy - Feature access control