security-headers-check
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary functionality is to perform security diagnostics on web headers. It does not attempt to access local credentials or exfiltrate sensitive user data.
- [PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection because it processes data (HTTP headers) from external websites.
- Ingestion points: The skill reads external data using
mcp__playwright__browser_navigateandmcp__playwright__browser_network_requestsas defined inSKILL.md. - Boundary markers: There are no specific delimiters or markers used to isolate the captured header data from the agent's internal instructions.
- Capability inventory: The skill uses browser automation tools to navigate to URLs and capture network response data.
- Sanitization: No sanitization or validation of the content retrieved from external headers is specified before analysis.
Audit Metadata