security-headers

What this skill does

Sends an HTTP request to the target URL, collects response headers, and checks for the presence and proper configuration of security-related headers. Classifies each header as present, missing, or misconfigured, and provides remediation recommendations for missing or improperly configured headers.

When to use

• During web application security assessments (initial reconnaissance phase)
• When running a pre-deployment security checklist
• During bug bounty or penetration testing to quickly identify header vulnerabilities

Prerequisites

• curl installed (included by default on most Linux/macOS systems)
• HTTP/HTTPS access to the target server

Inputs