performing-ssl-tls-security-assessment
Assess SSL/TLS server configurations using the sslyze Python library to evaluate cipher suites, certificate chains, protocol versions, HSTS headers, and known vulnerabilities like Heartbleed and ROBOT.
Best use case
performing-ssl-tls-security-assessment is best used when you need a repeatable AI agent workflow instead of a one-off prompt.
Assess SSL/TLS server configurations using the sslyze Python library to evaluate cipher suites, certificate chains, protocol versions, HSTS headers, and known vulnerabilities like Heartbleed and ROBOT.
Teams using performing-ssl-tls-security-assessment should expect a more consistent output, faster repeated execution, less prompt rewriting.
When to use this skill
- You want a reusable workflow that can be run more than once with consistent structure.
When not to use this skill
- You only need a quick one-off answer and do not need a reusable workflow.
- You cannot install or maintain the underlying files, dependencies, or repository context.
Installation
Claude Code / Cursor / Codex
Manual Installation
- Download SKILL.md from GitHub
- Place it in
.claude/skills/performing-ssl-tls-security-assessment/SKILL.mdinside your project - Restart your AI agent — it will auto-discover the skill
How performing-ssl-tls-security-assessment Compares
| Feature / Agent | performing-ssl-tls-security-assessment | Standard Approach |
|---|---|---|
| Platform Support | Not specified | Limited / Varies |
| Context Awareness | High | Baseline |
| Installation Complexity | Unknown | N/A |
Frequently Asked Questions
What does this skill do?
Assess SSL/TLS server configurations using the sslyze Python library to evaluate cipher suites, certificate chains, protocol versions, HSTS headers, and known vulnerabilities like Heartbleed and ROBOT.
Where can I find the source code?
You can find the source code on GitHub using the link provided at the top of the page.
SKILL.md Source
# Performing SSL/TLS Security Assessment ## Overview Assess SSL/TLS server configurations using sslyze, a fast Python-based scanning library. This skill covers evaluating supported protocol versions (SSLv2/3, TLS 1.0-1.3), cipher suite strength, certificate chain validation, HSTS enforcement, OCSP stapling, and scanning for known vulnerabilities including Heartbleed, ROBOT, and session renegotiation weaknesses. ## When to Use - When conducting security assessments that involve performing ssl tls security assessment - When following incident response procedures for related security events - When performing scheduled security testing or auditing activities - When validating security controls through hands-on testing ## Prerequisites - Python 3.9+ with `sslyze` library (pip install sslyze) - Network access to target HTTPS servers on port 443 - Understanding of TLS protocol versions and cipher suite classifications ## Steps ### Step 1: Configure Server Scan Create ServerScanRequest with ServerNetworkLocation specifying target hostname and port. ### Step 2: Execute TLS Scan Use sslyze Scanner to queue and execute scans for all TLS check commands concurrently. ### Step 3: Analyze Results Evaluate accepted cipher suites, certificate validity, protocol versions, and vulnerability scan results. ### Step 4: Generate Security Report Produce a JSON report with compliance findings and remediation recommendations. ## Expected Output JSON report with supported protocols, accepted cipher suites, certificate details, vulnerability results (Heartbleed, ROBOT), and HSTS status.