Security headers
Web security headers validation and configuration generationFrom its SKILL.md
npx -y skills add manastalukdar/ai-devstudio --skill security-headersAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
1.1 KB, 240 tokens by cl100k_base, as published. Nobody here has run it
Security Headers Validation
I'll analyze and implement web security headers (CSP, HSTS, X-Frame-Options, etc.) to protect against common attacks.
Arguments: $ARGUMENTS - URL to check, or framework for configuration generation
Security Headers Overview
Essential Headers:
- Content-Security-Policy (CSP) - Prevent XSS and injection attacks
- Strict-Transport-Security (HSTS) - Enforce HTTPS
- X-Frame-Options - Prevent clickjacking
- X-Content-Type-Options - Prevent MIME sniffing
- Referrer-Policy - Control referrer information
- Permissions-Policy - Feature access control
Token Optimization
Expected range: 400–1,500 tokens (initial), 100 tokens (server not accessible)
Caching: Caches header analysis in .claude/cache/security-headers/ for 7 days.
Early exit: Returns immediately if the server is not accessible at the target URL.
Patterns used: Grep-before-Read, early exit, git diff scope default, caching, progressive disclosure
What ships with it
Read from the repository
Just SKILL.md. No reference files, no scripts.