Skip to content
Get packs

HTTPS Form Submission Checker

Checks that web forms and fetch/XHR calls submit data only over HTTPS

Source Download skill
Repository
thedaviddias/Front-End-Checklist
Stars
74,632
Licence
MIT
Files
2 files

What it does

Once installed, the agent reviews HTML forms, form action URLs, and JavaScript fetch or XMLHttpRequest calls to confirm that submitted data travels only over encrypted HTTPS connections. It explains in plain terms why plain HTTP exposes passwords and personal data, and suggests fixes such as switching endpoints to https:// and redirecting HTTP to HTTPS on the server.

Great for

  • Web developers reviewing a login, signup, or checkout form before release
  • Teams doing a security pass on an existing site with legacy HTTP endpoints
  • Students learning why HTTPS matters for form data

Skip it if

  • Native mobile or desktop apps that do not use HTML forms, since the rule targets browser forms and web requests
  • Server-side network security audits beyond form submission, since the skill only covers this one checklist rule

Try asking

  • “Review this login form and tell me if any fields post to an http:// URL”
  • “Check my JavaScript fetch calls for any unencrypted endpoints”
  • “Explain to my team why our contact form must submit over HTTPS and how to fix it”
Step-by-step guide: how to use HTTPS Form Submission CheckerInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 2 original files, the MIT licence and an attribution note.

    form-https.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip form-https.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip form-https.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Point the agent at the specific HTML and JavaScript files or project folder so it can scan action attributes and fetch calls directly.
  • Ask it to also verify the live server redirects HTTP to HTTPS, since the skill's checks focus on the code rather than the running site.
  • Treat its output as a review aid and confirm findings with your own testing, as the skill itself is a short checklist with no automated verification.

What's inside

  • references/rule.md
  • SKILL.md

Redistributed unmodified from thedaviddias/Front-End-Checklist under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.