squirrelscan/skills

audit-website

Audit a website with the squirrelscan CLI and fix the findings in code. Runs SEO, performance, security, technical, content, accessibility, and 15 other rule categories (260+ rules), returns an LLM-optimized report, then drives an iterative fix loop, mapping issues to source files, applying fixes, and re-auditing until the site scores well. Use to discover and assess website or webapp issues and drive them to fixed.

All-time #391 Trending #1617 Hot #2299 First seen Jan 22, 2026
8-week activity · all time api

Installation

$ npx skills add squirrelscan/skills --skill audit-website

Summary

  • Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility.
  • Analyzes websites against 230+ rules spanning SEO, technical issues, performance, security, content quality, accessibility, mobile-friendliness, structured data, and more Returns LLM-optimized reports with overall health scores (0-100), category breakdowns, broken link detection, and actionable recommendations Supports three coverage modes: quick (25 pages), surface (100 pages with pattern sampling), and full (500 pages) for flexible audit depth Includes regression detection via diff mode to compare audits and identify regressions between scans Requires squirrel CLI installed locally; caches audit results in a project database for reuse across multiple report exports

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

Security audits

Partner security reviews for this skill.

agent-trust-hub SAFE

Analyzed Feb 17, 2026

The squirrelscan skill is a legitimate utility for website auditing. It contains no malicious code, hardcoded credentials, or obfuscation. It provides a structured XML-based output format specifically optimized for AI agents, which includes safety measures like XML escaping.

snyk MEDIUM

Analyzed Feb 17, 2026

[MEDIUM] W011: Third-party content exposure detected (indirect prompt injection risk).

socket Score 0.9000 · 0 alerts

Analyzed Mar 18, 2026

  • license 1
  • maintenance 1
  • quality 0.9
  • supply chain 1
  • vulnerability 1

0 alerts

Also in this package

Other skills from squirrelscan/skills.

npx skills add squirrelscan/skills

Browse all from squirrelscan/skills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 87
License LICENSE
Default branch main
Open issues 1
Status Active

Skill metadata

Parsed from SKILL.md frontmatter.

Version2.0
LicenseSee LICENSE file in repository root
CompatibilityRequires squirrel CLI installed and accessible in PATH
Allowed toolsBash(squirrel:*) Read Edit Grep Glob
More metadata
author
squirrelscan
version
2.0

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 5,850 B
  • docs README.md 1,152 B
  • docs SUMMARY.md 440 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 70,700 installs

Videos

Tutorials, guides, and showcases specifically about this skill.

SKILL.md

Audit a Website and Fix It

Run a squirrelscan audit against a website, read the LLM report, map each issue to the code or content that causes it, fix in batches, and re-audit until the score target is met.

Requires the squirrel CLI (squirrelscan.com/download; verify with squirrel --version). For CLI setup, login, publishing, MCP, and general CLI usage, use the companion squirrelscan skill.

Rule docs

Look up any rule at https://docs.squirrelscan.com/rules/{rulecategory}/{ruleid}, for example:

https://docs.squirrelscan.com/rules/links/external-links

Running the audit

squirrel audit https://example.com --format llm
  • ALWAYS use --format llm: it is compact, exhaustive, and made for agents.
  • If the user doesn't provide a URL, ask which site to audit.
  • PREFER auditing the live site: only there do you see true rendering, performance, and redirect behavior. If both a local dev server and a live site exist, suggest the live one; apply the fixes to the local code either way.
  • Audits are cached locally. Re-render later without recrawling: squirrel report <audit-id> --format llm.

Scan progression

  1. First pass, quick coverage (the default): a fast, shallow scan to learn the site's structure, technology, and biggest problems without impacting the site.
  2. Second pass, deeper coverage: -C surface (one page per URL pattern) for template-level coverage, or -C full for a comprehensive crawl before sign-off.
Mode Default pages Use
quick 25 First look, CI checks
surface 100 Template-level coverage (one sample per pattern like /blog/{slug})
full 500 Final verification, deep analysis

Useful flags: --refresh (ignore cache, full re-fetch), --resume (continue an interrupted crawl), -m <n> (page cap), --verbose (progress detail).

If the site blocks unknown crawlers (Shopify / Cloudflare), pass Web Bot Auth headers with repeated -H "Name: Value" flags. Header values are secrets and are redacted in output. See https://docs.squirrelscan.com/guides/web-bot-auth

The fix loop

  1. Present the report: score, grade, top issues by severity.
  2. Propose fixes: list the issues you can fix and confirm with the user before changing anything.
  3. Map issues to source: find the template, component, or content file behind each finding.
  4. Fix in batches: apply the approved fixes; use subagents to parallelize independent files.
  5. Re-audit (use --refresh after deploys or content changes) and show before/after scores.
  6. Repeat until the target is met or only judgment calls remain (for example "should this link be removed?"). Flag those for user review instead of guessing.

After each batch, verify the project still builds and existing checks pass.

Score targets

Starting score Target Expected work
< 50 (F) 75+ (C) Major fixes
50-70 (D) 85+ (B) Moderate fixes
70-85 (C) 90+ (A) Polish
> 85 (B+) 95+ Fine-tuning

A site is only considered COMPLETE and FIXED when it scores 95+ (Grade A) with --coverage full.

Issue categories and fix approach

Category Fix approach Parallelizable
Meta tags / titles / descriptions Edit page components or metadata config No
Structured data Add JSON-LD to page templates No
Missing H1 / heading hierarchy Edit page components + content files Yes (content)
Image alt text Edit content files Yes
Short meta descriptions Extend frontmatter descriptions Yes
HTTP to HTTPS links Find and replace in content Yes
Broken links Manual review, flag for user No

Rules carry a level (error, warning, notice) and a rank (1-10): fix errors first, then high-rank warnings. Code changes and content changes are equally important; treat them the same.

Parallelizing with subagents

  • Ask the user first: always confirm which fixes to apply before spawning subagents.
  • Group 3-5 files per subagent for the same fix type; only parallelize independent files (no shared components or config).
  • Spawn the subagents in a single message so they run concurrently.

Verifying regressions

Compare against a baseline to prove improvement or catch regressions:

squirrel report --diff <baseline-audit-id> --format llm
squirrel report --regression-since example.com --format llm

Completion

Done means: all errors fixed; warnings fixed or documented as needing human review; a re-audit confirms the improvement; and the user has seen the before/after score comparison plus a summary of every change made. Re-audit regularly to keep the site healthy. If the user wants to share results, offer a published report (see the squirrelscan skill).

Report format

The LLM report is a compact XML/text hybrid optimized for token efficiency: summary with health score, issues grouped by category with affected URLs, broken links, and prioritized recommendations. Full spec: [OUTPUT-FORMAT.md](references/OUTPUT-FORMAT.md)