Httpstat

Pretty HTTP response statistics with timing waterfall. Use when asked to check a URL's response time, debug slow requests, measure TTFB, or get HTTP timing b...

Security Scan

The skill's code, instructions, and requirements are consistent with a standalone HTTP timing tool; it requires no credentials or installs and does what the description says.

Purpose & Capability

Name/description (HTTP timing waterfall) matches the included Python scripts and README. The files implement a raw-socket HTTP client that measures DNS, TCP, TLS, TTFB, transfer and prints a waterfall — appropriate for the stated purpose.

Instruction Scope

SKILL.md instructs running the provided script (python3 scripts/httpstat.py) and the examples match the script's CLI. The runtime instructions do not ask the agent to read unrelated files, env vars, or send data to external endpoints beyond the user-specified URL. Note: the tool will send any headers you provide (e.g., Authorization) to the requested URL, so supplying secrets in headers will transmit them as normal for an HTTP client.

Install Mechanism

No install spec (instruction-only + bundled scripts). Nothing is downloaded or written at install time. Risk is low.

Credentials

No environment variables, credentials, or config paths are requested. The declared requirements match the code (no secrets required).

Persistence & Privilege

always is false and the skill does not request persistent system privileges or modify other skills' configurations. Autonomous invocation is allowed by default but not accompanied by elevated privileges or broad credential access.

Assessment

This skill is internally consistent and implements a local Python HTTP timing tool. Before using it, note: (1) it will connect to whatever URL you (or an agent) supply — avoid pointing it at internal services or URLs that would expose sensitive endpoints unless you trust the request, and avoid passing secrets in headers unless intended; (2) there are two identical script copies (root and scripts/) — benign but redundant; (3) as with any tool that performs network requests, an autonomous agent using this skill could be instructed to probe hosts you wouldn’t want scanned, so only enable it for agents you trust.

Pretty HTTP timing statistics. Shows DNS, TCP, TLS, TTFB, and transfer times.

Usage

# Basic timing
python3 scripts/httpstat.py https://example.com

# With headers
python3 scripts/httpstat.py https://api.github.com -H "Accept: application/json"

# POST request
python3 scripts/httpstat.py https://httpbin.org/post -X POST -d '{"key":"value"}'

Output

Shows a visual waterfall of: DNS Lookup → TCP Connection → TLS Handshake → Server Processing → Content Transfer