manage-headers Skill
Inspects and configures the security headers a Power Pages site sends to browsers — Content Security Policy, frame and clickjacking protection, cross-origin sharing, cookie behavior, and related site settings. Identifies gaps and walks the user through fixes. Use when the user wants to review headers, fix CSP errors, a Published by microsoft in power-platform-skills.
What is manage-headers Skill?
Inspects and configures the security headers a Power Pages site sends to browsers — Content Security Policy, frame and clickjacking protection, cross-origin sharing, cookie behavior, and related site settings. Identifies gaps and walks the user through fixes. Use when the user wants to review headers, fix CSP errors, a Published by microsoft in power-platform-skills. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Security review
- Security review use cases
Technical details
- Install or run with Copy skill directory
When to use manage-headers Skill
- Use it for security review.
Built with
Editorial notes
Source
- Creator: microsoft
- Repository: microsoft/power-platform-skills
- Skill file: plugins/power-pages/skills/manage-headers/SKILL.md
What it does
Inspects and configures the security headers a Power Pages site sends to browsers — Content Security Policy, frame and clickjacking protection, cross-origin sharing, cookie behavior, and related site settings. Identifies gaps and walks the user through fixes. Use when the user wants to review headers, fix CSP errors, a
Skill instructions
Plugin check: Run node "${PLUGINROOT}/scripts/check-version.js" — if it outputs a message, show it to the user before proceeding. Manage Headers Inspect and configure the HTTP security headers for a Power Pages site. Headers are configured as HTTP/ site settings stored in .powerpages-site/site-settings/ YAML files. Initial request: $ARGUMENTS Gotchas - Site settings are YAML files. Each header is a separate .yml file in .powerpages-site/site-settings/. The file name uses - instead of / (e.g., HTTP/X-Frame-Options → http-x-frame-options.sitesetting.yml). - Absent = no header. When a site setting is absent, the runtime omits that header entirely (except CSP on new sites — see headers-reference.md). - HSTS and Cache-Control are platform-managed. Do not try to set HTTP/Strict-Transport-Security — the runtime does not recognize it and the setting has no effect. - Maker-mode bypasses headers. Requests from Power Pages Studio skip all HTTP/ header emission. Verify headers in an incognito tab,
Explore related resources
Frequently asked questions
What is manage-headers?
manage-headers is a open-source AI agent skill with Copy skill directory. Inspects and configures the security headers a Power Pages site sends to browsers — Content Security Policy, frame and clickjacking protection, cross-origin sharing, cookie behavior, and related site.
Who is manage-headers best for?
manage-headers is best for reusing agent instructions, scripts, and references, security review workflows.
How do I install manage-headers?
Install or run manage-headers using Copy skill directory. Check manage-headers for the latest setup command.
Is manage-headers actively maintained?
manage-headers may need a closer maintenance check before production use.
Auto-fetched from GitHub.
