About
This skill provides production-ready implementation patterns and configurations for essential HTTP security headers across multiple environments, including Express.js, Nginx, and Python Flask. It streamlines the process of hardening web applications by offering standardized templates for Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), and other critical security directives. Whether you are preparing for a security audit or deploying a new production service, this skill ensures your headers are configured according to industry best practices and compatible with verification tools like Mozilla Observatory and SecurityHeaders.com.