Token导航 LogoToken导航TokenDH.com
研究检索敏感数据github未标认证来源可访问许可证需确认审计异常

audit-website审核网站

Agent Skill

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

总安装

874

周安装

35

GitHub Stars

3

下载量

283
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:audit-website(审核网站)
来源仓库:https://github.com/oldwinter/skills
仓库路径:skills/audit-website
安装命令:
npx skills add https://github.com/oldwinter/skills --skill audit-website
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/oldwinter/skills --skill audit-website

简介

用于辅助安全审计、权限检查和常见漏洞排查。

  • 适合梳理敏感配置、分析鉴权逻辑或生成安全复核清单。
  • 不能将工具输出直接当作最终结论。
  • 涉及密钥、令牌或生产系统时应先确认最小权限和操作边界。
  • 安装命令:npx skills add https://github.com/oldwinter/skills --skill audit-website

SKILL.md

Website Audit Skill

Audit websites for SEO, technical, content, performance and security issues using the squirrelscan cli.

squirrelscan provides a cli tool squirrel - available for macos, windows and linux. It carries out extensive website auditing by emulating a browser, search crawler, and analyzing the website's structure and content against over 140+ rules.

It will provide you a list of issues as well as suggestions on how to fix them.

Links

You can look up the docs for any rule with this template:

https://docs.squirrelscan.com/rules/{rule_category}/{rule_id}

example:

https://docs.squirrelscan.com/rules/links/external-links

What This Skill Does

This skill enables AI agents to audit websites for over 140 rules in 20 categories, including:

  • SEO issues: Meta tags, titles, descriptions, canonical URLs, Open Graph tags
  • Technical problems: Broken links, redirect chains, page speed, mobile-friendliness
  • Performance: Page load time, resource usage, caching
  • Content quality: Heading structure, image alt text, content analysis
  • Security: Leaked secrets, HTTPS usage, security headers, mixed content
  • Accessibility: Alt text, color contrast, keyboard navigation
  • Usability: Form validation, error handling, user flow
  • Links: Checks for broken internal and external links
  • E-E-A-T: Expertise, Experience, Authority, Trustworthiness
  • User Experience: User flow, error handling, form validation
  • Mobile: Checks for mobile-friendliness, responsive design, touch-friendly elements
  • Crawlability: Checks for crawlability, robots.txt, sitemap.xml and more
  • Schema: Schema.org markup, structured data, rich snippets
  • Legal: Compliance with legal requirements, privacy policies, terms of service
  • Social: Open graph, twitter cards and validating schemas, snippets etc.
  • Url Structure: Length, hyphens, keywords
  • Keywords: Keyword stuffing
  • Content: Content structure, headings
  • Images: Alt text, color contrast, image size, image format
  • Local SEO: NAP consistency, geo metadata
  • Video: VideoObject schema, accessibility

and more!

The audit crawls the website, analyzes each page against audit rules, and returns a comprehensive report with:

  • Overall health score (0-100)
  • Category breakdowns (core SEO, technical SEO, content, security)
  • Specific issues with affected URLs
  • Broken link detection
  • Actionable recommendations

When to Use

Use this skill when you need to:

  • Analyze a website's health
  • Debug technical SEO issues
  • Fix all of the issues mentioned above
  • Check for broken links
  • Validate meta tags and structured data
  • Generate site audit reports
  • Compare site health before/after changes
  • Improve website performance, accessibility, SEO, security and more.

Prerequisites

This skill requires the squirrel CLI to be installed and available in your PATH.

Installation

If squirrel is not already installed, you can install it using:

curl -fsSL https://squirrelscan.com/install | bash

This will:

  • Download the latest release binary
  • Install to ~/.local/share/squirrel/releases/{version}/
  • Create a symlink at ~/.local/bin/squirrel
  • Initialize settings at ~/.squirrel/settings.json

If ~/.local/bin is not in your PATH, add it to your shell configuration:

export PATH="$HOME/.local/bin:$PATH"

Windows Installation

Install using PowerShell:

irm https://squirrelscan.com/install.ps1 | iex

This will:

  • Download the latest release binary
  • Install to %LOCALAPPDATA%\squirrel\
  • Add squirrel to your PATH

If using Command Prompt, you may need to restart your terminal for PATH changes to take effect.

Verify Installation

Check that squirrel is installed and accessible:

squirrel --version

Setup

Running squirrel init will setup a squirrel.toml file for configuration in the current directory.

Each project should have a squirrel project name for the database - by default this is the name of the website you audit - but you can set it yourself so that you can place all audits for a project in one database

You do this either on init with:

squirrel init --project-name my-project

or config:

squirrel config set project.name my-project

If there is no squirrel.toml in the directory you're running from CREATE ONE with squirrel init and specify the '-n' parameter for a project name (infer this)

The project name is used to identify the project in the database and is used to generate the database name.

It is stored in ~/.squirrel/projects/

Usage

Intro

There are three processes that you can run and they're all cached in the local project database:

  • crawl - subcommand to run a crawl or refresh, continue a crawl
  • analyze - subcommand to analyze the crawl results
  • report - subcommand to generate a report in desired format (llm, text, console, html etc.)

the 'audit' command is a wrapper around these three processes and runs them sequentially:

squirrel audit https://example.com --format llm

YOU SHOULD always prefer format option llm - it was made for you and provides an exhaustive and compact output format.

If the user doesn't provide a website to audit - extrapolate the possibilities in the local directory and checking environment variables (ie. linked vercel projects, references in memory or the code).

If the directory you're running for provides for a method to run or restart a local dev server - run the audit against that.

If you have more than one option on a website to audit that you discover - prompt the user to choose which one to audit.

If there is no website - either local, or on the web to discover to audit, then ask the user which URL they would like to audit.

You should PREFER to audit live websites - only there do we get a TRUE representation of the website and performance or rendering issuers.

If you have both local and live websites to audit, prompt the user to choose which one to audit and SUGGEST they choose live.

You can apply fixes from an audit on the live site against the local code.

When planning scope tasks so they can run concurrently as sub-agents to speed up fixes.

When implementing fixes take advantage of subagents to speed up implementation of fixes.

Run typechecking and formatting against generated code when you finish if available in the environment (ruff for python, biome and tsc for typescript etc.)

Basic Workflow

The audit process is two steps:

  1. Run the audit (saves to database, shows console output)
  2. Export report in desired format
# Step 1: Run audit (default: console output)
squirrel audit https://example.com

# Step 2: Export as LLM format
squirrel report <audit-id> --format llm

Advanced Options

Audit more pages:

squirrel audit https://example.com --max-pages 200

Force fresh crawl (ignore cache):

squirrel audit https://example.com --refresh

Resume interrupted crawl:

squirrel audit https://example.com --resume

Verbose output for debugging:

squirrel audit https://example.com --verbose

Common Options

Audit Command Options

OptionAliasDescriptionDefault
--format <fmt>-f <fmt>Output format: console, text, json, html, markdown, llmconsole
--max-pages <n>-m <n>Maximum pages to crawl (max 500)500
--refresh-rIgnore cache, fetch all pages freshfalse
--resume-Resume interrupted crawlfalse
--verbose-vVerbose outputfalse
--debug-Debug loggingfalse

Report Command Options

OptionAliasDescription
--format <fmt>-f <fmt>Output format: console, text, json, html, markdown, xml, llm

Output Formats

Console Output (default)

The audit command shows human-readable console output by default with colored output and progress indicators.

LLM Format

To get LLM-optimized output, use the report command with --format llm:

squirrel report <audit-id> --format llm

The LLM format is a compact XML/text hybrid optimized for token efficiency (40% smaller than verbose XML):

  • Summary: Overall health score and key metrics
  • Issues by Category: Grouped by audit rule category (core SEO, technical, content, security)
  • Broken Links: List of broken external and internal links
  • Recommendations: Prioritized action items with fix suggestions

See OUTPUT-FORMAT.md for detailed format specification.

Examples

Example 1: Quick Site Audit with LLM Output

# User asks: "Check squirrelscan.com for SEO issues"
squirrel audit https://squirrelscan.com --format llm

Example 2: Deep Audit for Large Site

# User asks: "Do a thorough audit of my blog with up to 500 pages"
squirrel audit https://myblog.com --max-pages 500 --format llm

Example 3: Fresh Audit After Changes

# User asks: "Re-audit the site and ignore cached results"
squirrel audit https://example.com --refresh --format llm

Example 4: Two-Step Workflow (Reuse Previous Audit)

# First run an audit
squirrel audit https://example.com
# Note the audit ID from output (e.g., "a1b2c3d4")

# Later, export in different format
squirrel report a1b2c3d4 --format llm

Output

On completion give the user a summary of all of the changes you made.

Troubleshooting

squirrel command not found

If you see this error, squirrel is not installed or not in your PATH.

Solution:

  1. Install squirrel: curl -fsSL https://squirrelscan.com/install | bash
  2. Add to PATH: export PATH="$HOME/.local/bin:$PATH"
  3. Verify: squirrel --version

Permission denied

If squirrel is not executable:

chmod +x ~/.local/bin/squirrel

Crawl timeout or slow performance

For very large sites, the audit may take several minutes. Use --verbose to see progress:

squirrel audit https://example.com --format llm --verbose

Invalid URL

Ensure the URL includes the protocol (http:// or https://):

# ✗ Wrong
squirrel audit example.com

# ✓ Correct
squirrel audit https://example.com

How It Works

  1. Crawl: Discovers and fetches pages starting from the base URL
  2. Analyze: Runs audit rules on each page
  3. External Links: Checks external links for availability
  4. Report: Generates LLM-optimized report with findings

The audit is stored in a local database and can be retrieved later with squirrel report commands.

Additional Resources

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Codex

33%
按下载量换算93

Claude

29.45%
按下载量换算83

Cursor

19.88%
按下载量换算56

Gemini CLI

9.76%
按下载量换算28

安全审计

Gen Agent Trust Hub

未通过

Socket

通过

Snyk

未通过

权限和风险

敏感数据

该 Skill 可能接触密钥、Token、环境变量或敏感配置,应进入高风险复核队列,默认不自动发布。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在 warning/failed 结果,不能写成本站确认安全。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills