AI Blocks › Keep your code secure
Website security baseline checker
Point it at your site. Get a checklist covering HTTPS, security headers, secrets and content policy, with fixes ranked.
Website security baseline checker is a free AI skill for the job "Keep your code secure". Give the instructions to an AI assistant that supports the required files and tools, then review its output.
Free · No account · MIT licence · Made by RampStack
Made by RampStack. See the original on GitHub; we copied it as it is, with its licence.
What it does
A pre-launch security checklist for your site, with the weak spots ranked so you fix the dangerous ones first. It matters because most breaches come from basics that were never set up, not from clever attacks. You describe the site, where it is hosted and what third-party scripts it loads. The skill then walks six layers: how data travels (HTTPS, TLS version, HSTS), response headers, secrets handling, content security policy, access control and monitoring. For each layer it says what is in place, what is missing and what to change. Run it before launch and again every quarter to catch drift.
You give it
- Your site address and environments
- Your hosting platform and CDN
- How people log in (if they do)
- List of third-party scripts
- Compliance rules you must meet (optional)
- Codebase (optional)
- Web app (optional)
You get
- Checklist across six security layers
- Ranked list of fixes
- Header and policy settings to apply
- Secrets handling plan
- Schedule for re-checking
Use it when
- You are about to launch a new site and want a security check first.
- A vendor or auditor asked how your site is protected.
- You added a new third-party script and want to know what it exposes.
- It has been months since anyone looked at your site's security settings.
How to use it
- Add it to your AI once: download it and add the folder to Claude, ChatGPT or Codex as a skill.
- Ask for the job in your own words. Your AI opens the skill when it fits.
- It works best when your AI can look at your site's code or settings.