site-audit
Site audit
An audit answers what is wrong with a public site and in what order to fix it. This skill draws on squirrelscan's squirrelscan and audit-website skills (MIT, squirrelscan/skills), Audit Kit (MIT, Danilaa1/auditkit, audit-kit.dev) and FreeScan's public docs and blog (freescan.app, no licence: restated here, short quotes only), with every rule a tool states checked against Google, web.dev, Chrome and MDN where they disagree.
The SEO rules an audit checks (crawl, index, canonicals, sitemaps, titles, the issue catalogue and how to turn it into a work order) are in seo SKILL.md and seo TECHNICAL-AUDIT.md; structured data identity is in seo STRUCTURED-DATA.md; Lighthouse runs, budgets and CI are in web-performance LIGHTHOUSE-CI.md; response security headers are in secure-coding HEADERS.md; a manual accessibility review is in web-accessibility REVIEW.md; page structure, URLs and navigation are in site-architecture SKILL.md.
Severity. Findings here use P0 to P3 as in code-review REVIEWER.md. Audit Kit's Critical, High, Medium and Low become P0, P1, P2 and P3; squirrelscan's error, warning and notice (or info) become P1, P2 and P3; FreeScan's high is P1. Any finding that blocks the page's primary task (a dead form, an exposed secret, a production noindex) is P0 whatever the tool called it.
Apply only the routes and checks for the selected job. Read a linked skill's named file from its installed folder when available, or from the linked source. Report an unavailable required reference instead of inventing it. [skill-authoring, DISTRIBUTION.md#composing-skills]
| The job | Read |
|---|---|
| What to inspect and in what order: the outcome and baseline, the four areas, Audit Kit's checklists, the HTML checks with Google's own wording, security headers by value, the rendered DOM | CHECKLIST.md |
| Statuses (pass, fail, review, unknown, N/A, skipped), how FreeScan and squirrelscan compute scores, confidence caps, bands, score targets, why a score is not the work, benchmark disclosure | SCORING.md |
| The findings template, the scorecard, the final report's sections, the client email, fix briefs an agent can execute (role, inputs, task, output, rules), the untrusted-data preamble | FIX-BRIEFS.md |
| Launch audits (preflight, cutover, rescan), the cutover record, what breaks search at launch, the site launch QA checklist (before, at and two weeks after the switch), SaaS audits that stay outside the sign-in boundary | LAUNCH.md |
squirrelscan: install, levels, probing intensity by site ownership, credits, publishing, regression diffs, the --format llm schema, config, MCP, channel events, firewalls and access gateways, CI |
SQUIRRELSCAN.md |
Audit Kit's ak CLI and workspace, its Lighthouse run and what is stale in it, PageSpeed and Rich Results test links, FreeScan's MCP server and its limits |
TOOLS.md |