Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-conf-07
Test HTTP Strict Transport Security
Passed 21 of 23 test cases with the skill, and 15 of 23 without it.
and 4 more in the full report
6 fixed15 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 6 test cases the skill fixed. Same model, same prompt, with and without the skill.
We want to run a lightweight Python-based CLI tool to check HSTS policies on remote servers. What flag is passed to sslyze to perform strictly an HSTS security check?
| Checked | Without skill | With skill |
|---|---|---|
| Specifies the --hsts command option flag for sslyze | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-CONF-07
Test HTTP Strict Transport Security (HSTS)
HTTP Strict Transport Security (HSTS) is a security mechanism that forces browsers to communicate with websites only over HTTPS. When properly implemented, HSTS protects against protocol downgrade attacks, SSL stripping, and cookie hijacking. This test verifies that the HSTS header is present, properly configured, and includes appropriate directives.
| Directive | Description | Recommended |
|---|---|---|
max-age | Time in seconds to enforce HTTPS | >= 31536000 (1 year) |
includeSubDomains | Apply HSTS to all subdomains | Yes |
preload | Include in browser preload lists | Recommended |
test cases passed, vs 15 / 23 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.