Analyzing Security Headers
This skill allows Claude to automatically analyze a website's HTTP security headers and provide a comprehensive report. It identifies missing or misconfigured headers and offers actionable recommendations to improve security posture.
Install
/plugin marketplace add jeremylongshore/claude-code-plugins-plus-skills
/plugin install security-headers-analyzer@claude-code-plugins-plusRun these inside Claude Code. The skill comes with its plugin.
What this skill does
This skill analyzes HTTP security headers of a given domain to identify potential vulnerabilities and misconfigurations. It provides a detailed report with a grade, score, and recommendations for improvement. Use this skill when the user asks to "analyze security headers", "check HTTP security", "scan for security vulnerabilities", or requests a "security audit" of a website. It will automatically activate when security-related keywords are used in conjunction with domain names or URLs.
Trigger phrases
Claude loads this skill automatically when you say things like:
How it works
- Analyzes Headers: The plugin fetches the HTTP headers from the specified URL and analyzes them against security best practices.
- Generates Report: The plugin generates a detailed report, including a security grade, score, and specific recommendations for missing or misconfigured headers.
When to use it
- Analyze the security posture of a website.
- Identify missing or misconfigured HTTP security headers.
- Get recommendations for improving website security.
- Audit a website for compliance with security best practices.
Best practices
- Implement CSP: Start with a strict Content Security Policy to mitigate XSS vulnerabilities.
- Regularly Scan: Schedule regular scans to identify new vulnerabilities and misconfigurations.
Details
- Skill name
analyzing-security-headers- Plugin
- security-headers-analyzer
FAQ
What does the Analyzing Security Headers skill do?
This skill analyzes HTTP security headers of a given domain to identify potential vulnerabilities and misconfigurations. It provides a detailed report with a grade, score, and recommendations for improvement. Use this skill when the user asks to "analyze security headers", "check HTTP security", "scan for security vulnerabilities", or requests a "security audit" of a website. It will automatically activate when security-related keywords are used in conjunction with domain names or URLs.
How do I install the Analyzing Security Headers skill?
Claude Code plugin: /plugin marketplace add jeremylongshore/claude-code-plugins-plus-skills then /plugin install security-headers-analyzer@claude-code-plugins-plus. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.
Related skills
000 Jeremy Content Consistency Validator
jeremylongshore/claude-code-plugins-plus-skills
Validates messaging consistency across website, GitHub repositories, and local documentation. Generates comprehensive read-only discrepancy reports showing where messaging conflicts or inconsistencies exist. Activates when user mentions "consistency check", "validate documentation", "check for mixed messaging", "audit content consistency", or before updating internal paperwork.
001 Jeremy Taskwarrior Integration
jeremylongshore/claude-code-plugins-plus-skills
Enforces complete Taskwarrior integration protocol for ALL coding tasks. Activates automatically when user mentions "taskwarrior", "task warrior", "tw", or discusses task management. Decomposes all coding work into properly tracked Taskwarrior tasks with full lifecycle: task add → task start → implementation → task done. Integrates with Timewarrior for automatic time tracking.
Adapting Transfer Learning Models
jeremylongshore/claude-code-plugins-plus-skills
This skill automates the adaptation of pre-trained machine learning models using transfer learning techniques. It is triggered when the user requests assistance with fine-tuning a model, adapting a pre-trained model to a new dataset, or performing transfer learning. It analyzes the user's requirements, generates code for adapting the model, includes data validation and error handling, provides performance metrics, and saves artifacts with documentation. Use this skill when you need to leverage existing models for new tasks or datasets, optimizing for performance and efficiency.
Assisting With Soc2 Audit Preparation
jeremylongshore/claude-code-plugins-plus-skills
This skill assists with SOC2 audit preparation by automating tasks related to evidence gathering and documentation. It leverages the soc2-audit-helper plugin to generate reports, identify potential compliance gaps, and suggest remediation steps. Use this skill when the user requests help with "SOC2 audit", "compliance check", "security controls", "audit preparation", or "evidence gathering" related to SOC2. It streamlines the initial stages of SOC2 compliance, focusing on automated data collection and preliminary analysis.
Analyzing Dependencies
jeremylongshore/claude-code-plugins-plus-skills
This skill analyzes project dependencies for security vulnerabilities, outdated packages, and license compliance issues. It helps identify potential risks in your project's dependencies using the dependency-checker plugin. Use this skill when you need to check dependencies for vulnerabilities, identify outdated packages that need updates, or ensure license compatibility. Trigger phrases include "check dependencies", "dependency check", "find vulnerabilities", "scan for outdated packages", "/depcheck", and "license compliance". This skill supports npm, pip, composer, gem, and go modules project
Auditing Access Control
jeremylongshore/claude-code-plugins-plus-skills
This skill enables Claude to audit access control implementations in various systems. It uses the access-control-auditor plugin to identify potential vulnerabilities and misconfigurations related to access control. Use this skill when the user asks to "audit access control", "check permissions", "assess access rights", or requests a "security review" focused on access management. It's particularly useful for analyzing IAM policies, ACLs, and other access control mechanisms in cloud environments, applications, or infrastructure. The skill helps ensure compliance with security best practices and
Browse the most popular Claude skills, all security skills, or write your own with the skills generator.