security-audit

Audit client-side web security via CDP for TLS, CSP, cookies, and headers.

1|Updated Jan 9, 2026

Search Tags:#csp #web-security #headers #tls #security-audit #cookies #cdp-security

Ready to run

npx skills add https://github.com/anouar1991/binaryPetsClaude --skill security-audit-anouar1991

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/anouar1991/binaryPetsClaude/tree/main/plugins/playwright-toolkit/skills/security-audit
Command: npx skills add https://github.com/anouar1991/binaryPetsClaude --skill security-audit-anouar1991

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill enables a thorough client-side security assessment of a web page, detecting TLS certificate issues, CSP violations, mixed content, cookie security flags, SRI usage, and security headers, all via CDP Security and Audits domains.

Core Features & Use Cases

Mixed content detection and CSP violation reporting across the page.
Cookie security analysis including Secure, HttpOnly, and SameSite attributes.
Subresource Integrity (SRI) checks for external resources and meta CSP validation.
TLS certificate inspection and protocol/cipher analysis via OpenSSL and curl.
Open redirect and insecure link detection patterns.
Harvested findings summarized in a structured report for remediation.

Quick Start

Run the security-audit skill against your target URL to generate a full client-side security report.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit client-side web security headers and CSP violations?▼

Client-side security audits evaluate TLS, CSP, cookies, and security headers to detect mixed content and misconfigurations. This skill uses CDP Security and Audits domains to analyze a target web page and generate a structured report for remediation.

How do I check my web application for insecure cookies and missing SameSite attributes?▼

Checking web application cookies requires analyzing their Secure, HttpOnly, and SameSite attributes. This skill inspects cookie security flags via CDP Security domains to surface insecure configurations and summarize them in a remediation report.

Do I need a Playwright MCP-enabled environment to perform TLS certificate inspection?▼

Performing TLS certificate inspection requires a Playwright MCP-enabled environment, OpenSSL, and curl. These dependencies facilitate protocol and cipher analysis, enabling the skill to execute comprehensive CDP-based security checks against the target URL.

What is the best way to detect mixed content and validate Subresource Integrity (SRI)?▼

Detecting mixed content and validating Subresource Integrity involves checking external resources and meta CSP validation. This skill identifies mixed content, reports CSP violations, and checks SRI usage across the page using CDP-based analysis to produce structured findings.

When should I run a client-side security audit during my software release cycle?▼

Running a client-side security audit is ideal during pre-release security reviews, vulnerability assessments, and compliance checks. It surfaces insecure cookies, mixed content, and misconfigured headers before deployment, providing a remediation report.