https-downgrade

https-downgrade is an Application security skill for AI agents, published by thedaviddias in the Front-End-Checklist repository on GitHub. Skillspace rates https-downgrade C (74/100) and it passed the safety scan; a judge model has also reviewed it.

Use when auditing a site's internal and external links for protocol consistency, migrating a site from HTTP to HTTPS, or reviewing hardcoded URLs in a codebase that may use `http://` instead of `https://`.

Grade
C
Quality
74 / 100
Safety
Passed
GitHub stars
73,218

Placed #4 of 6 in the judged category final for Application security.

Our two independent classifiers differ on this skill's category, so treat the placement as provisional.

This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.

Our review

Architecture
100 / 100
Maturity
Structured: ships references or scripts
Security scan
No issues found
License
Not declared. Check the repository before reusing it.
Adoption
Adopted by 0 other repositories, in 1 collections
Scope
Portable: works in any project. Generic HTTPS/mixed-content best practice, not tied to any product or repo

Judge review

Placed #4 of 6 in the judged category final for Application security.

  • Trigger7878
  • Instructions7878
  • Specificity7575
  • Safety7272
  • Disclosure7878
  • Maintenance6262
A small, complete, well-organized rule with a working grep command, useful on its own merits despite being a link-hygiene check rather than a vulnerability scan.

Not checked yet

  • No blind task eval yet
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.