Probe a live web URL for security misconfigurations and exposed files.
npx skills add https://github.com/KSD-CO/IronCode --skill web-scan
Please help me install this Agent Skill. Skill: web-scan Source: https://github.com/KSD-CO/IronCode/tree/main/packages/ironcode/skills/web-scan Command: npx skills add https://github.com/KSD-CO/IronCode --skill web-scan
Active web security scanner. Probes a live URL for security misconfigurations, exposed sensitive files, HTTP security headers, SSL/TLS issues, CORS policy, and information disclosure. Uses only curl + python3 — no extra tools needed. Only scan targets you own or have explicit written authorization to test.
Run the /web-scan workflow with a target URL to start the automated scan.
High-intent search queries and answers about installing and using this skill.
To check a live URL for HTTP security headers and SSL/TLS issues, you can use an automated web security scanner. It probes the target with curl and python3 to detect misconfigurations and outputs a consolidated findings report without requiring additional tools.
Yes, you can scan web applications for CORS misconfigurations and exposed sensitive files. The scanning process performs non-destructive probes on the target URL to identify information disclosure and security policy issues, provided you own or are authorized to test the target.
The best way to perform quick security checks on internal services without extra tools is using a scanner implemented with only curl and python3. It performs baseline scans for misconfigurations and information disclosure, generating a report without needing additional dependencies.
Yes, you need explicit written authorization to run vulnerability scans on web APIs. Security scanning probes live targets for misconfigurations and information disclosure, so you must only scan web applications, APIs, or internal services that you own or have explicit permission to test.
A curl and python3 web scanner detects security misconfigurations including exposed sensitive files, missing HTTP security headers, SSL/TLS issues, CORS policy problems, and information disclosure. It performs non-destructive probes and outputs a consolidated findings report.
Non-destructive probes for web security testing are limited to detecting surface-level misconfigurations, exposed files, SSL/TLS issues, and CORS problems. They do not exploit vulnerabilities or perform deep penetration testing, focusing strictly on safe baseline scans for information disclosure.
habrahgithubPerform authorized penetration testing on applications, APIs, and network services.
josavicentevwAutomate security scanning and governance across CI/CD pipelines and compliance workflows.
vladkeslerDetect SSL/TLS certificate expiry and chain validity for a host.
arbazkhan971Perform authorized OWASP Top 10 penetration testing of web applications and APIs.
