仕事
Read-only site audit, then a fix prompt for missing security headers
Small-business sites ship without basic security headers and nobody notices.
困っていたこと
Chris Simpson (@ChrisSimpson) runs a Grok Bot that reads up to 500 pages of a site, changes nothing, and writes the report in plain words: pages that error, missing H1/title/description, missing alt text, load speed, and response headers. On one site everything passed except three missing headers (Strict-Transport-Security, Content-Security-Policy, X-Frame-Options), so he posted the exact fix prompt to hand to a bot — including a report-only CSP so the contact form and map don't break. Not affiliated with xAI.
インストールまたは作成するもの
Two passes: a read-only audit that explains findings in plain words, then a scoped fix prompt with a 'done means' line. Cloudflare path: HSTS under SSL/TLS > Edge Certificates; the other two via a Transform Rule.
ボット
Site auditor
Read up to 500 pages, change nothing, report in plain words.
プラグイン
ブラウザ
任意
ルーティン
初回の実行では使いません。まず手動で1回通して確認してください。
共有できるボット
必要なら、インストール用のリンクを開いてください。貼り付けたい場合は、下に公開されたプロンプトがあります。
x.ai で開くプロンプト
Security headers fix prompt (author-quoted)
Quoted from @ChrisSimpson — as published. Do not invent a second system prompt.
You are fixing my website, [your site]. 1. Fetch my home page and list its response headers. Say which of strict-transport-security, content-security-policy and x-frame-options are missing. 2. Give me the exact Cloudflare steps to add each one: HSTS in SSL/TLS > Edge Certificates, the other two with a Transform Rule. 3. Write a content-security-policy that allows every script, form and map my pages use, in report-only mode first. 4. Check my contact form and map still work. Done means all 3 headers are in the home page response and nothing breaks. Report what you found with the exact URLs, then what you changed.
初回実行
- 1Read https://x.com/ChrisSimpson/status/2110531573179122074 (credit @ChrisSimpson).
- 2Ask a bot for a read-only audit of your site: errors, headlines, alt text, speed, and response headers, in plain words.
- 3If headers are missing, paste the author's fix prompt with your site URL.
- 4Apply the CSP in report-only mode first and check your forms and maps.
- 5Approve each Cloudflare change yourself, then re-run the header check.
承認フェンス
The audit changes nothing. Any DNS/Cloudflare change waits for your yes; you verify forms still work.
調整ポイント
Steal the audit-then-fix split and the 'done means' line. Test CSP in report-only first.
出典
Chris - Local SEO @ChrisSimpson · 元の投稿
xAI とは提携していません。このプロンプトは当サイトが書いたものではありません。第三者テンプレートの規約も適用されます。
Pro パック
アイデアだけでなく、完全な構成が必要ですか？
Pro パックには、人気ユースケースのジョブ本文、プロンプト、スケジュール、落とし穴が入っています。