What does the skill check?

It checks whether a site serves all content securely over HTTPS and whether the certificate in use is valid.

Does it fix HTTPS problems?

The skill is described as an auditing tool; it reports on HTTPS and certificate status rather than fixing server configuration.

Serve all pages over HTTPS

SkillWeb & browsing

This is an agent skill for auditing whether a website or web application serves content exclusively over HTTPS with a valid certificate. It gives an AI agent a repeatable procedure for checking that all content on a site is delivered securely, so the person running the audit gets a clear answer instead of manual certificate and URL checks.

Use Serve all pages over HTTPS in Claude, ChatGPT or Ahel Desktop

Free. Sign in, add Serve all pages over HTTPS and connect your AI. About a minute.

Claude ChatGPT Ahel Desktop

Also: Claude Code · Cursor · Codex

Then ask your AI: use the Serve all pages over HTTPS skill

Details

Instructions available. Your AI can read the instructions. Execution depends on the setup they require.

Account requirements not reviewed. Check the skill instructions before use; ahel provides instructions and does not run this skill.

No other account needed.

Have an AI agent that supports loading skills.

Serve all pages over HTTPSStart free

What your AI can do with it

Audit whether a website serves content exclusively over HTTPS
Check whether a site's HTTPS certificate is valid
Verify that a web application delivers all content securely
Flag content that is not served over HTTPS

Getting started

Have an AI agent that supports loading skills.
Add the https skill to the agent's available skills.
Ask the agent to audit a specific website or web application for HTTPS-only delivery and a valid certificate.
Review the agent's findings on any content not served securely.

What this skill tells your AI

The instructions your AI receives, as published by thedaviddias/front-end-checklist in skills/https/SKILL.md and read by ahel’s review.

Plain HTTP exposes every request and response to anyone on the network path — ISPs, Wi-Fi operators, and MITM attackers can read passwords, session tokens, and personal data without any warning to the user.

Quick Reference

All HTTP traffic must redirect to HTTPS with a 301 (permanent) redirect
TLS certificates must be valid, not expired, and cover all hostnames (including www)
HTTPS is a prerequisite for HSTS, HTTP/2, Service Workers, geolocation, and other modern APIs
Use a free certificate from Let's Encrypt or your hosting provider's managed TLS
Verify the certificate chain with SSL Labs (ssllabs.com/ssltest) — aim for A or A+

Check

Check whether all pages of this website are served over HTTPS. Verify the TLS certificate is valid, not expired, and covers all hostnames. Confirm HTTP requests redirect to HTTPS with a 301 status code.

Fix

Configure the web server to obtain a TLS certificate (e.g., via Let's Encrypt/Certbot), redirect all HTTP requests to HTTPS with a 301 redirect, and ensure all internal links and resources use HTTPS URLs.

Explain

Explain why serving pages over HTTPS is essential for security, what happens when plain HTTP is used, and how to obtain and configure a TLS certificate.

Code Review

Review server config, headers, forms, and integration points related to Serve all pages over HTTPS. Flag exact responses, cookies, or browser behaviors that violate the rule, and verify them against the effective production-like response.

For full implementation details, code examples, and framework-specific guidance, see references/rule.md.

Rule page: https://frontendchecklist.io/en/rules/security/https

Signals

GitHub stars: 74k
Forks: 7k
Last commit: Oct 2026
Hacker News mentions: 7

ahel review

K1binfo
installs-packages (in references/rule.md)

Automated review, not a security audit. Ruleset v1+k2.

Questions

When should this skill be used?: Use it when auditing whether a website or web application serves content exclusively over HTTPS with a valid certificate.
What does the skill check?: It checks whether a site serves all content securely over HTTPS and whether the certificate in use is valid.
Does it fix HTTPS problems?: The skill is described as an auditing tool; it reports on HTTPS and certificate status rather than fixing server configuration.

Advanced

Item type: skill
Key: https
Source: github.com/thedaviddias/front-end-checklist

github.com/thedaviddias/front-end-checklist