MCP App StoreMCP App Store
from skillshub54
Auto-activating skill that generates and validates security HTTP headers and provides guidance for implementing secure header configurations.
Generates guidance and code/config snippets to implement security-related HTTP headers (CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy) and validates common configurations against best-practice patterns. The skill provides step-by-step recommendations and example configurations for web servers and application frameworks.
Use when you need to implement or audit HTTP security headers, when onboarding security fundamentals for web apps, or when hardening a site against common header-based attacks. It activates on phrases like "security headers generator" or requests to set up security headers.
Useful for developer-focused agents and code assistants that can emit server config (Nginx, Apache) or framework-specific headers (Express, Next.js).
This skill is a boilerplate template with no actual implementation — it promises to generate and validate security HTTP headers but provides zero concrete logic, templates, or actionable guidance. The SKILL.md consists entirely of generic placeholder text that could apply to any skill with a name swap. No scripts are bundled. Users triggering this skill would receive no useful output beyond vague promises of 'step-by-step guidance.'
Extremely low-value skill — appears to be auto-generated from a template. The description claims capabilities (generates, validates, provides guidance) that the skill body completely lacks. The name 'security-headers-generator' suggests a useful tool, but the content is indistinguishable from any other placeholder skill.
Algolia Cost Tuning
Practical guide to reduce Algolia billing by auditing records/requests, switching to virtual replicas, multi-query usage, caching, and cleanup strategies.
Anthropic Security Basics
Practical security practices for Anthropic Claude integrations: API key management, input validation, prompt-injection defenses, and output scanning.
Colorize — Strategic UI Color Introduction
Introduce purposeful color to monochromatic interfaces to improve hierarchy, meaning, and visual engagement while preserving accessibility.
Input Validation Checker
Automated guidance and code patterns for implementing robust input validation and secure-coding practices (OWASP-aligned).
Plotly Chart Generator
Generates Plotly charts and production-ready code for visualizations; validates outputs and follows best practices for charts and presentations.
Turborepo Guidance
Practical Turborepo guidance for JavaScript/TypeScript monorepos: task configuration, caching, filtering, and CI best-practices.
Exa Webhooks & Events
Patterns and example code for building webhook-style monitors and alerts around Exa neural search (scheduled monitors, similarity alerts, digests).
Test Orchestrator Skill
QA orchestration skill: defines test strategy, assigns unit/integration/E2E suites, enforces coverage thresholds, and coordinates CI test execution.
Splitwise Automation (Composio/Rube MCP)
Automation patterns for Splitwise via Composio's Splitwise toolkit over Rube MCP; includes discovery, connection checks, and safe execution patterns.
Golang Dependency Management
Guidelines and CLI recipes for safely adding, upgrading, auditing and managing Go dependencies, including govulncheck, go.mod practices, vendoring, and automate
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
radar — Smart Contract AST & Security Analysis
Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r
Bash Pro
Defensive, production-grade Bash scripting patterns and CI/CD best practices: strict mode, safe argument parsing, testing with Bats, and tooling (ShellCheck/shf
Analyzing Ransomware Leak Site Intelligence
Collect and analyze ransomware data-leak site (DLS) posts to extract victim, group, sector and geographic trends for threat intelligence and proactive defense.