skills.rest
resultakak
resultakakCOMMUNITY
Explore all skills by this author →
Website𝕏@resultakakGitHub

http-protocol

Audit HTTP protocol implementations for status codes, headers, TLS, and CORS compliance.

Updated May 11, 2026
Search Tags:#api#audit#protocol#http#headers#tls
One-click install
npx skills add https://github.com/resultakak/argos --skill http-protocol
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: http-protocol
Source: https://github.com/resultakak/argos/tree/main/skills/http-protocol
Command: npx skills add https://github.com/resultakak/argos --skill http-protocol

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates the audit of HTTP protocol discipline across services to ensure correct semantics, explicit idempotency guidance, and explicit header usage.

Core Features & Use Cases

  • Status code semantics and proper error handling without mixing data payloads.
  • Explicit idempotency guidance for POST/PATCH operations and header usage.
  • Cache headers and Vary/ETag best practices to optimize CDN and client caching.
  • TLS 1.2+ with HSTS and ALPN, HTTP/2 multiplexing, and HTTP/3 readiness.
  • Webhook signing, SSE support, and robust connection pool sizing considerations.
  • CORS configuration and origin restrictions to prevent credential leaks.
  • Use cases include API reviews, TLS audits, migrations to HTTP/2/HTTP/3, and incident triage runbooks.

Quick Start

Analyze a target API service and generate a protocol-compliance report detailing status codes, headers, TLS settings, and CORS rules.

Frequently Asked Questions about http-protocol

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit HTTP protocol compliance for my API endpoints?▼

To audit HTTP protocol compliance, you can automatically evaluate API endpoints for correct status code semantics, explicit idempotency guidance, and proper header usage to ensure safety and correctness across microservices.

What is the best way to check TLS and HSTS configuration for API security?▼

Checking TLS and HSTS configuration involves auditing your services for TLS 1.2+ enforcement, HSTS activation, and ALPN usage to meet security standards and prevent protocol downgrade attacks across gateway layers.

How do I validate Cache-Control, ETag, and Vary headers for CDN optimization?▼

Validating Cache-Control, ETag, and Vary headers requires auditing cache header best practices across your APIs to optimize client caching and CDN delivery based on explicit idempotency and header usage rules.

Does this HTTP audit cover HTTP/2 multiplexing and HTTP/3 readiness?▼

Yes, this HTTP audit evaluates HTTP/2 multiplexing support and HTTP/3 readiness, ensuring your API gateway layers and microservices meet modern performance and protocol standards during migrations.

Can I review CORS configuration and Webhook signing for credential leaks?▼

You can review CORS configuration and Webhook signing to apply strict origin restrictions and verify SSE support, preventing credential leaks and ensuring secure webhook payload delivery across services.

How do I fix mixed data payloads in API status code error handling?▼

To fix mixed data payloads in API error handling, audit your status code semantics to ensure proper error separation, verifying that POST/PATCH operations maintain explicit idempotency without leaking data.

Related Skills

Explore More Software Engineering Skills→
HyperscapeAIHyperscapeAI
91

api-gateway-configurator

Configure API gateways with rate limiting and JWT authentication.

Official
Advanced
abzhawabzhaw

api-security

Audit internal API endpoints for authentication, CORS, and rate-limiting gaps.

Community
Intermediate
OmarTheGreyOmarTheGrey
1

adapter-factory

Integrate new AI models into the AI Counsel deliberation system via CLI and HTTP adapters.

Community
Advanced
airoweairowe
14

Accessibility Audit Skill

Audit web projects for WCAG 2.1 violations using axe-core and eslint-plugin-jsx-a11y.

Community
Advanced