content-security-policy-headers - Design and audit strict Content Security Policies
Design, roll out, troubleshoot, and audit Content Security Policy headers using nonce- or hash-based scripts, strict-dynamic, and violation reporting.
Tags
Updated: 2026-10-04Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Design strict CSP policies
- Choose nonce or hash strategies
- Configure strict-dynamic
- Roll out report-only mode
- Configure violation reporting
- Audit unsafe directives
Inputs
- Site architecture and scripts
- Audit findings or console errors
- CSP policy plan
Outputs
- Recommended CSP headers
- Rollout steps and directive rationale
- Deterministic policy audit result