Grokbot TemplatesGrokbot Templates
كل حالات الاستخدام

العمل

Read-only site audit, then a fix prompt for missing security headers

Small-business sites ship without basic security headers and nobody notices.

مشاركة

نقطة الألم

Chris Simpson (@ChrisSimpson) runs a Grok Bot that reads up to 500 pages of a site, changes nothing, and writes the report in plain words: pages that error, missing H1/title/description, missing alt text, load speed, and response headers. On one site everything passed except three missing headers (Strict-Transport-Security, Content-Security-Policy, X-Frame-Options), so he posted the exact fix prompt to hand to a bot — including a report-only CSP so the contact form and map don't break. Not affiliated with xAI.

ماذا تثبّت أو تنشئ

Two passes: a read-only audit that explains findings in plain words, then a scoped fix prompt with a 'done means' line. Cloudflare path: HSTS under SSL/TLS > Edge Certificates; the other two via a Transform Rule.

الروبوتات

  • Site auditor

    Read up to 500 pages, change nothing, report in plain words.

الإضافات

  • المتصفح

    اختياري

الروتينات

  • لا شيء في التشغيل الأول. راقب تنفيذًا يدويًا واحدًا أولًا.

روبوت قابل للمشاركة

اضغط التثبيت إن أردته. النص التوجيهي المنشور يبقى في الأسفل لمن يفضّل اللصق.

افتح على x.ai

النص التوجيهي

Security headers fix prompt (author-quoted)

Quoted from @ChrisSimpson — as published. Do not invent a second system prompt.

You are fixing my website, [your site]. 1. Fetch my home page and list its response headers. Say which of strict-transport-security, content-security-policy and x-frame-options are missing. 2. Give me the exact Cloudflare steps to add each one: HSTS in SSL/TLS > Edge Certificates, the other two with a Transform Rule. 3. Write a content-security-policy that allows every script, form and map my pages use, in report-only mode first. 4. Check my contact form and map still work. Done means all 3 headers are in the home page response and nothing breaks. Report what you found with the exact URLs, then what you changed.

التشغيل الأول

  1. 1Read https://x.com/ChrisSimpson/status/2110531573179122074 (credit @ChrisSimpson).
  2. 2Ask a bot for a read-only audit of your site: errors, headlines, alt text, speed, and response headers, in plain words.
  3. 3If headers are missing, paste the author's fix prompt with your site URL.
  4. 4Apply the CSP in report-only mode first and check your forms and maps.
  5. 5Approve each Cloudflare change yourself, then re-run the header check.

حاجز الموافقة

The audit changes nothing. Any DNS/Cloudflare change waits for your yes; you verify forms still work.

ما الذي تعدّله

Steal the audit-then-fix split and the 'done means' line. Test CSP in report-only first.

المصدر

Chris - Local SEO @ChrisSimpson · المنشور الأصلي

غير تابع لـ xAI. لم نكتب هذا النص التوجيهي. تبقى شروط القوالب التابعة لطرف ثالث سارية.

تصفح القوالب

تصفح مخططات الفرق

حزمة Pro

تريد الإعداد الكامل، لا الفكرة فقط؟

تمنحك حزم Pro وصف الوظيفة والنصوص التوجيهية والجداول والمزالق لحالات الاستخدام الشائعة.

اطلع على Pro