What problem does it solve? Manually inspecting Content-Security-Policy headers across targets is slow and error-prone, and weak directives like unsafe-inline or wildcards are easy to miss during recon. This Skill automates CSP extraction and heuristic analysis so security testers can quickly identify XSS and clickjacking leads on in-scope hosts. ## Core Features & Use Cases - CSP Extraction and Parsing: Fetches a URL with a low-volume GET request, collects policies from both response headers and HTML meta tags, and parses them into structured directives. - Weakness Detection: Flags unsafe-inline, unsafe-eval, wildcards, missing object-src, missing base-uri, and frame-ancestors gaps, then rates each policy's strength. - Structured Reporting: Writes REPORT.md and csp.json under notes/{target}/recon-data/csp-analysis/ for downstream cartographer and hypothesis workflows. - Use Case: During the recon phase of a bug-bounty engagement, run the analyzer against an in-scope app to discover that script-src allows 'unsafe-inline', generating a lead for follow-up XSS testing with a proof of concept. ## Quick Start Analyze the CSP of an authorized target by asking the agent to run the csp_analyze.py script against the target URL with the output directory set to the target's recon-data folder.
