Web Security Headers Audit

This skill empowers Claude to perform comprehensive audits of HTTP security headers, identifying critical vulnerabilities such as clickjacking, XSS, and protocol downgrade attacks. It provides a structured workflow for collecting headers using curl, evaluating HSTS transport security, analyzing Content Security Policy (CSP) for bypasses, and verifying cookie security attributes like Secure, HttpOnly, and SameSite. It is an essential tool for penetration testers and developers during security assessments, CI/CD pipeline checks, or compliance reviews such as PCI DSS and SOC 2.

Key Features

Use Cases