382 skills · sorted by relevance
Find resources loaded over unencrypted HTTP within HTTPS pages, a problem called mixed content. Review resource URLs and security headers, then guide HTTPS replacements and automatic request upgrades to address blocked or insecure resources.
Audit an HTTPS website for HTTP links in pages, resources, and application code. Group findings by link type, update internal URLs, and check whether external destinations support HTTPS before changing them.
Audit whether a website serves all pages over HTTPS with valid TLS certificates, which secure connections. Check certificate coverage and expiration, permanent redirects from HTTP, and HTTPS URLs for internal links and resources, then review the necessary configuration changes.
Review HSTS, a browser policy that keeps site connections on HTTPS. Check response headers, policy duration, and subdomain coverage, guide server or CDN configuration, and explain the precautions needed before enabling browser preloading.
Review HTML forms and JavaScript requests to find data sent over unencrypted HTTP. Check submission URLs, pages with implicit form destinations, and server redirects, then update endpoints to use HTTPS.
Check that HTTP requests redirect to HTTPS with a permanent 301 response while preserving the page path and query parameters. Review server or CDN settings, verify response headers, and explain how HSTS helps returning visitors avoid HTTP requests.
Set up portless to give local development servers stable, named URLs instead of changing port numbers. It covers multiple apps, separate Git worktree URLs, HTTPS setup, and checks for proxy, domain resolution, and certificate problems.
Manage Git user settings and authentication for a specific workspace. Set configuration values, register HTTPS access tokens, and import SSH keys, with options to list or remove credentials without exposing stored tokens or private keys in listings.
Deploy and manage services across an Uncloud cluster using the uc command line. Covers public ports, Caddy routing for incoming traffic, service scaling, log inspection, and management of machines and storage volumes.
Deploy n8n on a Linux server using Docker Compose and Caddy for automatic HTTPS. Covers single-instance setups, workers for parallel execution, secret management, deployment checks, updates, backups, and restoration.
Connect a domain you already own to a Convex app. The skill guides DNS records and domain verification, updates authentication settings for the new address, and checks that the app is served over HTTPS.
Review web code for security, browser compatibility, and code quality. Covers HTTPS, dependency vulnerabilities, security headers, outdated APIs, HTML structure, error handling, and cleanup of event listeners, with examples and audit checklists to guide improvements.
Helps write and review Nginx configurations for websites and APIs. Covers forwarding requests to application servers, distributing traffic, HTTPS settings, caching, compression, and logs to support performance tuning and investigation of slow responses.
Configure HTTP, HTTPS, and SOCKS proxies for requests to external providers. Manage shared or provider-specific rules, test connections, and control proxy rotation to define which intermediary servers handle outgoing requests.
Access external APIs for email, calendars, GitHub, and payments through OneCLI Gateway. The proxy adds stored credentials to outgoing HTTPS requests, letting agents use connected services without handling secret values directly.
Prepare readable Markdown from HTTPS article pages using an optional external Defuddle cleaner. The workflow checks URLs, requires network consent and executable review, previews extracted content, and can retain the cleaned source separately from wiki ingestion.
Set up Pi-hole on a home network to block advertising and malware domains. Manage blocklists, encrypt DNS lookups that turn names into addresses, configure device address assignment, add local service names, and investigate connection problems.
Check whether a web app is ready for PWA installation, which lets users install it like an app. Review HTTPS, app settings, icons, and offline responses, and identify missing or inconsistent configuration.
Simulate man-in-the-middle attacks, where traffic is intercepted between communicating systems, in authorized environments. Use Bettercap, Ettercap, and mitmproxy to test encryption enforcement, certificate validation, and network detection, then document findings and recommendations.
Review websites for security, browser compatibility, and code quality. Identify issues in HTTPS settings, third-party libraries, HTML, and error handling, then apply concrete improvements using checklists and implementation examples.
Test iPolloWork's handling of corporate certificates in a Daytona Windows sandbox. Set up valid and broken HTTPS certificate chains, then verify that the desktop app and runtimes it starts use certificates trusted by Windows.
Aggregate and analyze customer feedback from [Delighted](https://composio.dev/toolkits/delighted), [GatherUp](https://composio.dev/toolkits/gatherup), [Gleap](https://composio.dev/toolkits/gleap), or [Simplesat](https://composio.dev/toolkits/simplesat)
The English summary is being prepared. Showing the original description.
Audit and set up favicons, the small site icons used in browser tabs and search results. Check HTML links, image formats and dimensions, HTTPS access, and crawler restrictions, with guidance for ICO, SVG, and iOS icons.
Set up a Windows sandbox in Daytona to test OpenWork with a simulated corporate certificate authority. Check successful and broken HTTPS connections, the desktop app’s use of Windows trust, and certificate handling in runtimes it launches.