manage-headers Skill
Inspects and configures the security headers a Power Pages site sends to browsers — Content Security Policy, frame and clickjacking protection, cross-origin sharing, cookie behavior, and related site settings. Identifies gaps and walks the user through fixes. Use when the user wants to review headers, fix CSP errors, a Published by microsoft in power-platform-skills.
Decision snapshot
Is this a fit?
Security review, Includes SKILL.md, Reusable instructions
Compatibility not yet detected.
Can write or update data, Write actions, Filesystem access, Shell access
Copy skill directory
2 months ago · MIT license
Confirm write permissions and scope before use. Access note: Local files. Access note: Shell access.
What is manage-headers Skill?
Inspects and configures the security headers a Power Pages site sends to browsers — Content Security Policy, frame and clickjacking protection, cross-origin sharing, cookie behavior, and related site settings. Identifies gaps and walks the user through fixes. Use when the user wants to review headers, fix CSP errors, a Published by microsoft in power-platform-skills. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement. See how SkillIndex evaluates profiles.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Security review
- Security review use cases
Declared skill metadata
- Source file: plugins/power-pages/skills/manage-headers/SKILL.md
Allowed tools declared by source
These fields retain source and confidence evidence from the indexed SKILL.md.
Compatibility and setup
- Install or run with Copy skill directory
- Local files
- Shell access
Requirements and access
Security and permissions
Review permissions before connecting any MCP server to an agent. Pay special attention to whether it can read local files, write data, call external services, or perform destructive actions.
When to use manage-headers Skill
- Use it for security review.
Built with
Editorial notes
Source
- Creator: microsoft
- Repository: microsoft/power-platform-skills
- Skill file: plugins/power-pages/skills/manage-headers/SKILL.md
What it does
Inspects and configures the security headers a Power Pages site sends to browsers — Content Security Policy, frame and clickjacking protection, cross-origin sharing, cookie behavior, and related site settings. Identifies gaps and walks the user through fixes. Use when the user wants to review headers, fix CSP errors, a
Skill instructions
Plugin check: Run node "${PLUGINROOT}/scripts/check-version.js" — if it outputs a message, show it to the user before proceeding. Manage Headers Inspect and configure the HTTP security headers for a Power Pages site. Headers are configured as HTTP/ site settings stored in .powerpages-site/site-settings/ YAML files. Initial request: $ARGUMENTS Gotchas - Site settings are YAML files. Each header is a separate .yml file in .powerpages-site/site-settings/. The file name uses - instead of / (e.g., HTTP/X-Frame-Options → http-x-frame-options.sitesetting.yml). - Absent = no header. When a site setting is absent, the runtime omits that header entirely (except CSP on new sites — see headers-reference.md). - HSTS and Cache-Control are platform-managed. Do not try to set HTTP/Strict-Transport-Security — the runtime does not recognize it and the setting has no effect. - Maker-mode bypasses headers. Requests from Power Pages Studio skip all HTTP/ header emission. Verify headers in an incognito tab,
Verified compatibility and discovery
Frequently asked questions
What is manage-headers?
manage-headers is a open-source AI agent skill with Copy skill directory. Inspects and configures the security headers a Power Pages site sends to browsers — Content Security Policy, frame and clickjacking protection, cross-origin sharing, cookie behavior, and related site.
Who is manage-headers best for?
manage-headers is best for reusing agent instructions, scripts, and references, security review workflows.
How do I install manage-headers?
Install or run manage-headers using Copy skill directory. Check manage-headers for the latest setup command.
Is manage-headers actively maintained?
manage-headers may need a closer maintenance check before production use.
Project health auto-fetched from the source repository.
Maintain this resource?
Review this source-backed profile, send a correction with evidence, or link to it from your documentation. Claims verify your relationship to the project; profile facts still require source evidence and editorial review.
