Grokbot TemplatesGrokbot Templates
Все сценарии

Работа

Read-only site audit, then a fix prompt for missing security headers

Small-business sites ship without basic security headers and nobody notices.

Поделиться

Что болело

Chris Simpson (@ChrisSimpson) runs a Grok Bot that reads up to 500 pages of a site, changes nothing, and writes the report in plain words: pages that error, missing H1/title/description, missing alt text, load speed, and response headers. On one site everything passed except three missing headers (Strict-Transport-Security, Content-Security-Policy, X-Frame-Options), so he posted the exact fix prompt to hand to a bot — including a report-only CSP so the contact form and map don't break. Not affiliated with xAI.

Что установить или создать

Two passes: a read-only audit that explains findings in plain words, then a scoped fix prompt with a 'done means' line. Cloudflare path: HSTS under SSL/TLS > Edge Certificates; the other two via a Transform Rule.

Боты

  • Site auditor

    Read up to 500 pages, change nothing, report in plain words.

Плагины

  • Браузер

    Необязательно

Рутины

  • На первом запуске их нет. Сначала пройдите один раз вручную.

Ботом можно поделиться

Можно установить в один клик. Опубликованный промпт всё равно ниже — его можно просто вставить.

Открыть на x.ai

Промпт

Security headers fix prompt (author-quoted)

Quoted from @ChrisSimpson — as published. Do not invent a second system prompt.

You are fixing my website, [your site]. 1. Fetch my home page and list its response headers. Say which of strict-transport-security, content-security-policy and x-frame-options are missing. 2. Give me the exact Cloudflare steps to add each one: HSTS in SSL/TLS > Edge Certificates, the other two with a Transform Rule. 3. Write a content-security-policy that allows every script, form and map my pages use, in report-only mode first. 4. Check my contact form and map still work. Done means all 3 headers are in the home page response and nothing breaks. Report what you found with the exact URLs, then what you changed.

Первый запуск

  1. 1Read https://x.com/ChrisSimpson/status/2110531573179122074 (credit @ChrisSimpson).
  2. 2Ask a bot for a read-only audit of your site: errors, headlines, alt text, speed, and response headers, in plain words.
  3. 3If headers are missing, paste the author's fix prompt with your site URL.
  4. 4Apply the CSP in report-only mode first and check your forms and maps.
  5. 5Approve each Cloudflare change yourself, then re-run the header check.

Барьер одобрения

The audit changes nothing. Any DNS/Cloudflare change waits for your yes; you verify forms still work.

Что поправить

Steal the audit-then-fix split and the 'done means' line. Test CSP in report-only first.

Источник

Chris - Local SEO @ChrisSimpson · Исходный пост

Не связаны с xAI. Этот промпт написали не мы. Условия сторонних шаблонов по-прежнему действуют.

Смотреть шаблоны

Смотреть схемы команд

Пакет Pro

Нужна полная настройка, а не только идея?

В пакетах Pro — текст задачи, промпты, расписания и подводные камни для популярных сценариев.

Смотреть Pro