What problem does it solve? Web servers often accumulate many virtual hosts with inconsistent CORS policies and missing security headers, and manually auditing each config file is slow and error-prone. This Skill builds a per-site index of every nginx server block and Apache VirtualHost so misconfigurations are recorded once and tracked across runs. ## Core Features & Use Cases - Per-site config index: Records each site's defining file and line, listen port, and resolved log paths as a stable journal entry. - CORS auditing: Flags Access-Control-Allow-Origin wildcard policies with the exact file:line and a review-tier remediation suggestion. - Security header checks: Detects missing HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Content-Security-Policy headers per site. - Use Case: During a server audit, run this after service inventory to get a deduplicated journal of every site's header and CORS posture, which the fixer skill can then remediate with operator confirmation. ## Quick Start Ask the AI to inspect the web server configuration on this machine and journal any CORS or missing security header findings per site.
