More screenshots

    Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIDeepSeekDeepSeekMuseMuse+22 more

    Repair Proxy Trust Header Bugs

    1

    Repair proxy trust bugs involving Forwarded/X-Forwarded-* chains, client IP, scheme, host, port, trusted-hop selection, canonical URLs, secure cookies, and spoofed edge metadata.

    $1

    Secure checkout via Stripe

    Money-back guarantee

    Converts to your local currency at checkout

    Security scanned
    Repair Proxy Trust Header Bugs

    Repair Proxy Trust Header Bugs

    Example session with this skill installed

    Our app trusts the leftmost X-Forwarded-For and X-Forwarded-Proto whenever the header exists. Direct clients can spoof HTTPS and internal IPs. Repair using local proxy-chain fixtures and keep the configured trusted-proxy list.

    • Read your context and instructions
    • Compiled the repair proxy trust

    Forwarded metadata is trusted by presence rather than by the peer that supplied it. The repair walks the chain from the connected peer through only configured trusted hops, derives client IP/scheme/host from that boundary, and tests direct spoofing, one/two trusted proxies, mixed Forwarded/XFF, and canonical URL behavior.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    The problem

    Reverse proxy header parsing is often inconsistent across different service layers, leading to incorrect client IP detection or broken secure request redirects. Developers struggle with fragmented trust boundaries where one component trusts X-Forwarded-For while another ignores it, causing auth failures or protocol mismatches.

    What it does

    • Identifies and patches inconsistent X-Forwarded-* and Forwarded header parsing logic.
    • Standardizes client IP extraction and canonical host reconstruction across service paths.
    • Audits and repairs trusted proxy hop lists and CIDR validation boundaries.
    • Generates deterministic local fixtures and regression tests for multi-hop proxy scenarios.
    • Implements centralized normalization to prevent state ownership conflicts during TLS termination.

    Why this beats prompting it yourself

    Manual prompts often result in insecure workarounds that weaken validation just to fix a bug. This skill enforces strict trust boundaries and protocol policies while ensuring validation happens before irreversible state changes, preventing common security regressions in proxy handling.

    Use cases

    • Fixing incorrect HTTPS redirection loops behind a Load Balancer.
    • Resolving client IP spoofing vulnerabilities by hardening trust policies.
    • Aligning host header reconstruction across legacy and modern service paths.
    • Standardizing header cleanup to prevent sensitive data leakage between proxy hops.

    Known limitations

    Does not access live production environments or secrets. Relies on repository files and local fixtures to simulate proxy behavior.

    Find more skills like this on the Claude Skills Marketplace, the Codex Skills Marketplace and the Gemini Skills Marketplace, or browse Claude Skills for APIs & Backend.

    Cannot redesign trusted-proxy policy, canonical-host policy, TLS termination architecture, client-IP policy, authorization, and public errors; cannot verify production infrastructure or prove every runtime, proxy, network, filesystem, or scheduler ordering.

    How to use

    1. 1

      Connect your agent to the Agensi MCP

      Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup

    2. 2

      Sign in to Agensi

      Your agent shows a sign-in link. Sign in and click Allow.

    3. 3

      Ask for what you need

      Your agent loads this skill and uses it on your task. It always asks before buying a skill.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill goes through the trust checks below.

    Security scanned

    Checked by our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Money-back guarantee

    Doesn't do what its page promises? You get your money back.

    Trust & safety

    Security scan

    Security scan passed 2 months ago

    Permissions

    Terminal / Shell
    Read Files
    Write Files

    Run on a clean branch with repository files and disposable local fixtures. Review patches and validation before merge. Keep production services, real credentials, customer payloads, and deployment out of scope.

    Listed2 months ago
    Updated9 days ago

    What's inside

    Frequently Asked Questions

    This skill provides specialized logic to audit and fix inconsistencies in header chains like X-Forwarded-For, ensuring your application correctly identifies client IPs and protocols behind load balancers without creating security vulnerabilities.

    It is compatible with all major AI agents that have codebase access, including AutoGPT, BabyAGI, and specialized IDE-based agents, provided they can execute file-level modifications.

    The skill works by analyzing your repository's existing proxy configuration and networking logic to generate hardened, standardized header parsing routines and local regression tests.

    You receive the core logic modules, standardized trust-boundary templates, and a suite of test fixtures designed to simulate multi-hop proxy scenarios for local validation.

    The skill is highly effective for applications written in Node.js, Python, Go, and Ruby that utilize standard reverse proxy setups like Nginx, HAProxy, or cloud-native load balancers.

    New in APIs & Backend