Detect missing or misconfigured HTTP security headers and cookie attributes.
npx skills add https://github.com/Q16G/aster --skill security-header-audit
Please help me install this Agent Skill. Skill: security-header-audit Source: https://github.com/Q16G/aster/tree/main/skills/code-audit/security-header-audit Command: npx skills add https://github.com/Q16G/aster --skill security-header-audit
This Skill helps identify missing or misconfigured HTTP security headers to reduce exposure to common web vulnerabilities.
Audit a web application to verify essential security headers and cookie attributes and generate remediation guidance.
High-intent search queries and answers about installing and using this skill.
Auditing HTTP security headers involves inspecting web application responses for missing or misconfigured settings like HSTS, X-Frame-Options, and CSP. This detects header-related misconfigurations and produces actionable remediation guidance.
Essential security headers to verify include HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, and CSP. Checking these headers strengthens web app defenses and reduces exposure to common vulnerabilities.
Yes, security header audits integrate into CI/CD pipelines and manual reviews. The process applies reproducible rules across servers and frameworks, detecting misconfigurations and providing audit-ready evidence for deployment.
Checking cookie attributes during a security header review is necessary because misconfigured flags expose web apps to vulnerabilities. Measuring cookie security alongside HTTP headers ensures comprehensive defense and yields audit-ready evidence.
Yes, security header audits apply to web applications across diverse servers and frameworks. The process uses reproducible rules to consistently identify missing or misconfigured headers regardless of the underlying environment.
cmndcntrlcyberDetect HTTP request smuggling vulnerabilities by analyzing header parsing inconsistencies.
jimmytardyAudit web application security for common vulnerabilities and misconfigurations.
DevelopersGlobalAutomate CI/CD pipelines with quality gates and deployment processes.
zzw4257Scan web applications for known vulnerabilities using Nuclei templates.
