security-headers-generator

Security Headers Generator - Auto-activating skill for Security Fundamentals. Triggers on: security headers generator, security headers generator Part of the Security Fundamentals skill category.

0.97x

Quality

Does it follow best practices?

Impact

93%

0.97x

Average score across 3 eval scenarios

Securityby

Passed

No known issues

Optimize this skill with Tessl

npx tessl skill review --optimize ./planned-skills/generated/03-security-fundamentals/security-headers-generator/SKILL.md

Evaluation results

96%

-4%

Secure an Express.js REST API for Production

Production-ready security headers middleware

Criteria

Without context

With context

HSTS header

100%

60%

X-Frame-Options

100%

X-Content-Type-Options

100%

Content-Security-Policy

100%

Referrer-Policy

100%

Permissions-Policy

100%

npm security package

100%

No placeholder values

100%

Security documentation

100%

Server fingerprint removed

100%

83%

-2%

HTTP Response Header Security Auditor

OWASP standards-based header validation

Criteria

Without context

With context

OWASP alignment

HSTS check

100%

X-Frame-Options check

100%

X-Content-Type-Options check

100%

CSP check

100%

Referrer-Policy check

100%

Structured JSON report

100%

Risk explanations

100%

Authentication/transport security coverage

100%

No placeholder/stub checks

100%

60%

100%

Harden a Healthcare Web Portal for Production Deployment

Multi-platform production security configuration

Criteria

Without context

With context

HSTS in Nginx

100%

X-Frame-Options

100%

X-Content-Type-Options

100%

Content-Security-Policy

100%

Referrer-Policy

100%

Permissions-Policy

100%

Production HSTS max-age

100%

Step-by-step deployment guide

100%

No placeholder values

100%

npm security package

100%

Repository: jeremylongshore/claude-code-plugins-plus-skills
Commit: 87f14eb

Evaluated: about 1 month ago
Agent: Claude Code
Model: Claude Sonnet 4.6

Table of Contents

Secure an Express.js REST API for Production HTTP Response Header Security Auditor Harden a Healthcare Web Portal for Production Deployment

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.