A professional-grade security auditing utility for Openclaw Skills that identifies missing HTTP security headers and analyzes TLS configurations.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install http-header-analyzer
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install http-header-analyzer using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is HTTP Header Analyzer?
The HTTP Header Analyzer is a technical security tool designed to evaluate the defensive posture of web applications. By auditing response headers and TLS settings, it helps developers and security researchers identify critical gaps in protection. As a robust addition to the Openclaw Skills library, it automates the detection of common vulnerabilities such as cross-site scripting (XSS), clickjacking, and data leakage by verifying the implementation of industry-standard security policies.
HTTP Header Analyzer Use Cases
- Performing rapid security assessments of production web servers.
- Auditing multiple domains simultaneously for compliance with security header best practices.
- Identifying server version disclosure that could lead to targeted exploits.
- Verifying the strength and validity of TLS certificates and encryption ciphers.
- Integrating automated security checks into local development and deployment workflows.
How HTTP Header Analyzer Works
- The user initiates a scan by providing a target URL or a list of URLs in a text file.
- The skill utilizes curl to fetch the HTTP response headers from the specified targets.
- It cross-references the retrieved headers against a database of recommended security headers such as HSTS and CSP.
- If enabled, the tool performs a TLS handshake check to retrieve certificate details and identify potential encryption weaknesses.
- The analyzer generates a detailed report, assigning a security score and risk level based on the findings.
HTTP Header Analyzer Setup
To use this tool within the Openclaw Skills environment, ensure you have python3 and curl installed on your system.
# Run the analyzer on a specific domain
python3 scripts/analyze-headers.py https://example.com
# Perform a bulk audit using a file of URLs
python3 scripts/analyze-headers.py -f targets.txt
HTTP Header Analyzer Data Schema & Taxonomy
The skill generates structured audit data to provide clear insights into server security.
| Attribute | Description |
|---|---|
| Header Name | The specific security header (e.g., Strict-Transport-Security) being checked. |
| Status | Indicates if the header is present, missing, or misconfigured. |
| Risk Level | Categorization of potential impact from Low to High. |
| Score | A numerical representation of the total security health of the headers. |
| TLS Info | Details regarding the certificate authority and expiration date. |
HTTP Header Analyzer Advanced Features
- Multi-target scanning capabilities for efficient bulk domain auditing.
- JSON output support for easy parsing by other Openclaw Skills or external monitoring tools.
- Severity filtering to allow users to focus exclusively on high-risk vulnerabilities.
- Custom User-Agent configuration to simulate specific client environments or bypass basic blocks.
- Detailed TLS certificate inspection to ensure modern encryption standards are met.
SKILL.md
Loading
Related Openclaw Skills
Memory Orchestrator
A sophisticated layered memory system for OpenClaw that organizes long-term knowledge, captures user preferences, and optimizes context window usage through progressive disclosure.
Soul Persona Manager
A persona management system for switching, previewing, and restoring AI identity configurations via a curated remote catalog.
Language Tutor Pro
A persistent, conversation-driven AI language tutor that uses adaptive memory and spaced repetition to build fluency without gamification.
Git Factory
Git Factory provides automated worktree isolation for AI coding agents to ensure conflict-free parallel development.
Secure Password Generator
A cryptographically secure utility for generating passwords, passphrases, and API keys using Python's CSPRNG module.
proofai
A cryptographic toolkit for certifying, anchoring, and verifying AI decisions on the blockchain to ensure EU AI Act compliance.
METADATA
Featured*
