skill-audit · Headers

import { wrapFetchWithPayment } from "@x402/fetch";
import { privateKeyToAccount } from "viem/accounts";

const account = privateKeyToAccount(process.env.PRIVATE_KEY);
const fetchWithPay = wrapFetchWithPayment(fetch, account);

const res = await fetchWithPay("https://eltociear-skill-audit.hf.space/headers", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    "url": "https://example.com"
  }),
});
const data = await res.json();

curl -X POST \
  "https://eltociear-skill-audit.hf.space/headers" \
  -H "Content-Type: application/json" \
  -d '{"url":"https://example.com"}' \
  -H "X-PAYMENT: <signed x402 payment>"

{
  "grade": "B",
  "headers": {
    "strict-transport-security": "max-age=63072000"
  },
  "missing": [
    "content-security-policy"
  ],
  "present": [
    "strict-transport-security"
  ],
  "score": 70,
  "status": 200,
  "url": "https://example.com"
}