skills.rest
anouar1991
anouar1991COMMUNITY
Explore all skills by this author →
GitHub

security-audit

Audit client-side web security via CDP for TLS, CSP, cookies, and headers.

1|Updated Jan 9, 2026
Search Tags:#csp#web-security#headers#tls#security-audit#cookies#cdp-security
One-click install
npx skills add https://github.com/anouar1991/binaryPetsClaude --skill security-audit-anouar1991
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/anouar1991/binaryPetsClaude/tree/main/plugins/playwright-toolkit/skills/security-audit
Command: npx skills add https://github.com/anouar1991/binaryPetsClaude --skill security-audit-anouar1991

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill enables a thorough client-side security assessment of a web page, detecting TLS certificate issues, CSP violations, mixed content, cookie security flags, SRI usage, and security headers, all via CDP Security and Audits domains.

Core Features & Use Cases

  • Mixed content detection and CSP violation reporting across the page.
  • Cookie security analysis including Secure, HttpOnly, and SameSite attributes.
  • Subresource Integrity (SRI) checks for external resources and meta CSP validation.
  • TLS certificate inspection and protocol/cipher analysis via OpenSSL and curl.
  • Open redirect and insecure link detection patterns.
  • Harvested findings summarized in a structured report for remediation.

Quick Start

Run the security-audit skill against your target URL to generate a full client-side security report.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit client-side web security headers and CSP violations?▼

Client-side security audits evaluate TLS, CSP, cookies, and security headers to detect mixed content and misconfigurations. This skill uses CDP Security and Audits domains to analyze a target web page and generate a structured report for remediation.

How do I check my web application for insecure cookies and missing SameSite attributes?▼

Checking web application cookies requires analyzing their Secure, HttpOnly, and SameSite attributes. This skill inspects cookie security flags via CDP Security domains to surface insecure configurations and summarize them in a remediation report.

Do I need a Playwright MCP-enabled environment to perform TLS certificate inspection?▼

Performing TLS certificate inspection requires a Playwright MCP-enabled environment, OpenSSL, and curl. These dependencies facilitate protocol and cipher analysis, enabling the skill to execute comprehensive CDP-based security checks against the target URL.

What is the best way to detect mixed content and validate Subresource Integrity (SRI)?▼

Detecting mixed content and validating Subresource Integrity involves checking external resources and meta CSP validation. This skill identifies mixed content, reports CSP violations, and checks SRI usage across the page using CDP-based analysis to produce structured findings.

When should I run a client-side security audit during my software release cycle?▼

Running a client-side security audit is ideal during pre-release security reviews, vulnerability assessments, and compliance checks. It surfaces insecure cookies, mixed content, and misconfigured headers before deployment, providing a remediation report.

Related Skills

Explore More Software Engineering Skills→
dmzoneilldmzoneill
2

cert-check

Checks TLS certificate health including expiry, chain verification, TLS version, and cipher inspection for endpoints.

Community
Advanced
jd-opensourcejd-opensource
299

pentest-config-hardening

Audit HTTP security headers, TLS settings, and CSP policies across web assets.

Official
Advanced
constzzconstzz

golang-continuous-integration

Automate Golang CI/CD pipeline setup with GitHub Actions.

Community
Advanced
PriyanshKuniyalPriyanshKuniyal

sast-configuration

Configures and manages SAST tools for automated vulnerability detection in CI/CD pipelines.

Community
Advanced