Infrastructure & Security Headers
When Invoked
The user runs /vapt headers <url> or this skill is triggered as part of Wave 1 during /vapt audit.
Phase 1: Header Collection
1.1 Fetch Response Headers
curl -sIL <url>
Also check specific paths:
curl -sI <url>/login 2>/dev/null
curl -sI <url>/api 2>/dev/null
curl -sI <url>/admin 2>/dev/null
1.2 Extract All Security-Relevant Headers
Parse the response for each of these headers (case-insensitive):
[Description truncada. Veja o README completo no GitHub.]