website-audit-tools

Plugin website-audit-tools from marketplace wasp-nest in legioncodeinc/vibe-coding-tools. Commands read from the repo's manifest — 29 days ago.

Skills (22)

• accessibility-audit-stinger

  Automated-plus-heuristic WCAG 2.1 AA audit across crawled site-data/, a 0-100% score and AA/AAA-style rating, every finding cited with evidence. Not a legal EAA-conformance determination.

• aeo-audit-stinger

  100-page AEO audit: llms.txt presence, per-engine AI-crawler robots.txt access (GPTBot, PerplexityBot, ClaudeBot, etc.), citation-relevant structured data, subjective topical alignment. Wave W5.

• analytics-stack-stinger

  Foundational, industry-specific, and lawful-only de-anonymization analytics audit, built on the vendor census. Flags jurisdiction questions rather than a compliance verdict. Wave W5.

• audit-intake-stinger

  Runs the four-question intake, scaffolds the shared audit workspace, hydrates every template with the answers. First Drone in every engagement, no authorization-capture step by design.

• audit-reporting-stinger

  Generates customer- and auditor-facing reports (Markdown + styled HTML), subtly Legion Code Inc.-branded, rendered only from the scored findings register.

• audit-scoring-stinger

  N/A-aware weighted rollup engine (leaf to sub-audit to category to final), critical-security-override, populates the branded named-range-driven XLSX scorecard.

• blog-content-stinger

  Bonus, conditional blog audit: 10 recent posts, word count, subjective quality read, AI-authorship reported only as a probability band with method and error rate, never a verdict. Wave W6a.

• content-semantics-stinger

  Quantified reading-level estimate (Flesch Reading Ease/Grade Level) plus a subjective ICP-relevancy score per crawled page, kept in separate sections. Wave W5.

• ecommerce-catalog-stinger

  Bonus, conditional ecommerce audit: up to 25 products, schema.org Product metadata completeness (quantified) plus subjective copy/conversion quality, kept separate. Wave W6b.

• icp-positioning-stinger

  Niche/ICP/goal assessment, conversion-action taxonomy, two-stage buyer-readiness model. Owns the run's hard focus-undeterminable gate: halts and asks rather than guessing.

• internal-linking-stinger

  Internal link-graph analysis: orphan-page detection, click-depth via BFS, four-dimension anchor-text scoring plus cannibalization detection, internal-PageRank-style equity flow. Wave W5.

• keyword-intelligence-stinger

  Compiles 75-100 keywords + 25-50 questions via a strict 4-tier source chain: Search Console MCP, then customer Trends export, then EXA/Firecrawl inference, then paid API. Degrades gracefully.

• master-website-auditor

  Fallback orchestrator for harnesses without native command dispatch. Activates the same 20 Drone/Stinger pairs as /perform-website-audit, same order, same shared workspace.

• performance-cwv-stinger

  CDN/caching-header audit plus Core Web Vitals scoring for an external site, from an outside unauthenticated posture. Cross-linked with lighthouse-pagespeed-stinger, not duplicated. Wave W5.

• site-crawler-stinger

  Platform-aware crawl to depth 100, raw HTML+MD storage in site-data/, which nine Wave-5 Drones then read read-only with zero write contention.

• social-presence-stinger

  Facebook/LinkedIn/Instagram presence audit via the harness's own browser tooling, opt-in auth per platform; decline or unavailable auth is a silent no-op, never a score penalty.

• source-command-perform-website-audit

  Run a full Website Auditor by Legion Code Inc. engagement end to end: intake through scored, branded reports, dispatching the 20 Drone/Stinger pairs in dependency order.

• stack-fingerprint-stinger

  Landing-page-only stack and render-mode fingerprinting (React/Vite, Next.js, SvelteKit, WordPress, Shopify, Magento). Writes target-profile.json every later Drone reads.

• technical-seo-stinger

  100-page technical SEO audit: crawlability/indexability, sitemap/robots.txt validation, canonicalization, log-file/crawl-budget analysis, keyword-frequency and long-tail semantic analysis. Wave W5.

• vendor-inventory-stinger

  Third-party vendor census after a real JS-executed page load, including GTM-hydrated scripts and content-injection/metadata-manipulation tools like Search Atlas, classified by function.

• visual-funnel-stinger

  25-page visual funnel walk, real desktop (1440x900) and mobile (390x844) Chrome, screenshots at every checkpoint. No state-creating actions unless interactive mode is opted into.

• web-security-posture-stinger

  External, passive security-posture audit: headers, TLS coarse-check, cookies, CSP, injection surface, payment-path integrity. Highest-weighted category (20%); a critical leaf caps the grade at C.

Slash commands (1)

• /website-audit-tools:perform-website-audit

  Run a full Website Auditor by Legion Code Inc. engagement end to end: intake through scored, branded reports, dispatching the 20 Drone/Stinger pairs in dependency order.

Subagents (20)

• accessibility-audit-wasp-drone

  Automated-plus-heuristic WCAG 2.1 AA accessibility audit of a crawled third-party site, scored 0-100% with an AA/AAA-style rating band, every finding cited to its success criterion with evidence. Invoke as part of Wave 5's nine-wide parallel wave, reading `site-data/` read-only and writing only to `

• aeo-audit-wasp-drone

  100-page-depth Answer Engine Optimization audit: `llms.txt` presence/correctness, per-engine AI-crawler robots.txt access (GPTBot, PerplexityBot, ClaudeBot, Googlebot, Google-Extended, Cohere-AI), citation-relevant structured data, and a subjective topical-alignment read against `content-targets/que

• analytics-stack-wasp-drone

  Foundational, industry-specific, and (where lawful) de-anonymization analytics audit, built on vendor-inventory-wasp-drone's census. Invoke as part of wave W5's parallel wave, reading 01-recon/vendor-inventory.md and 02-positioning/. Do NOT render a legal-compliance verdict, flag what's present and

• audit-intake-wasp-drone

  First Drone in every website-audit engagement. Asks exactly four questions in order (auditor name, audited-party contact name, audited-party business name, website URL), then scaffolds the shared `www.<domain>-audit/` workspace and hydrates every downstream template with the answers. Invoke as step

• audit-reporting-wasp-drone

  Generates the customer-facing and auditor-facing reports, in Markdown and styled HTML, subtly Legion Code Inc.-branded. Invoke as wave W8, sync, the final step, after `audit-scoring-wasp-drone` completes. Do NOT invent a finding not present in `scoring/findings-register.csv`, report generation is a

• audit-scoring-wasp-drone

  The rubric engine: rolls every leaf finding up through sub-audit, category, and final scores using the N/A-aware weighted formulas from the build plan, applies the critical-security-override, and populates the branded XLSX scorecard. Invoke as wave W7, sync, after every applicable Wave-5/W6 Drone ha

• blog-content-wasp-drone

  Bonus, conditional audit of the 10 most recent blog posts: word count, [subjective] semantic/quality read, and AI-authorship-probability analysis reported strictly as a probability band with method and error rate, never a verdict. Invoke as wave W6a, only when a blog is detected during crawl/fingerp

• content-semantics-wasp-drone

  Subjective copy interpretation for the crawled content set: a quantified reading-level estimate per page plus a `[subjective]`-labelled ICP-relevancy score. Invoke as part of wave W5's parallel wave, reading `site-data/` and `02-positioning/`. Do NOT let the subjective ICP-relevancy read bleed into

• ecommerce-catalog-wasp-drone

  Bonus, conditional audit of up to 25 products across categories: metadata completeness (quantified, schema.org Product field checks by Google surface) and on-page copy/conversion-potential quality ([subjective]). Invoke as wave W6b, only when commerce is detected, in parallel with blog-content-wasp-

• icp-positioning-wasp-drone

  Determines the audited site's niche, ICP, and conversion-action taxonomy, and owns this run's one hard stop: if the site's focus can't be determined, the run halts and asks rather than guessing. Invoke as wave W2, sync, after both W1a and W1b complete. Do NOT let any downstream Drone proceed past th

• internal-linking-wasp-drone

  Internal link-graph analysis across the crawled page set: orphan pages, click-depth outliers (BFS from defined entry points), anchor-text quality and cannibalization, internal-PageRank-style link-equity flow. Invoke as part of wave W5's parallel wave, reading only `site-data/`. Do NOT crawl; if a pa

• keyword-intelligence-wasp-drone

  Compiles 75-100 keywords and 25-50 customer questions using a strict four-tier source priority: Google Search Console MCP (if connected and has data) before a customer-supplied Google Trends export, before EXA/Firecrawl inference, before a paid keyword API as last resort. Invoke as wave W3, sync, im

• performance-cwv-wasp-drone

  CDN/caching strategy and Core Web Vitals audit for an external site the customer does not necessarily control the infrastructure of, from the outside. Invoke as part of wave W5's parallel wave, reading site-data/. Cross-links lighthouse-pagespeed-wasp-drone rather than duplicating it; do NOT re-deri

• site-crawler-wasp-drone

  Platform-aware crawl to a depth of 100 pages, storing raw HTML and Markdown per page under `site-data/`, which every Wave-5 Drone then reads read-only. Invoke as wave W4, sync, immediately after `stack-fingerprint-wasp-drone` has written `target-profile.json`. Do NOT crawl authenticated/gated areas,

• social-presence-wasp-drone

  Facebook, LinkedIn, and Instagram presence audit using the harness's own browser tooling, explicitly prompting the user to authenticate per platform if deeper data is wanted, defaulting to a silent no-op (never a score penalty) when declined or unavailable. Invoke as part of wave W5's parallel wave

• stack-fingerprint-wasp-drone

  Fingerprints the audited site's technology stack (React+Vite, Next.js, SvelteKit, WordPress, Shopify, or Magento) and render mode (SSR/CSR/hybrid) from the landing page alone. Invoke as wave W1a immediately after `audit-intake-wasp-drone` completes, in parallel with `vendor-inventory-wasp-drone`. Do

• technical-seo-wasp-drone

  100-page-depth SEO audit: technical structure (title/meta/canonical/robots/sitemap/structured-data), keyword-frequency analysis against `content-targets/keywords.md`, long-tail semantic analysis against `content-targets/questions.md`, and deep-linking findings cross-linked with internal-linking-stin

• vendor-inventory-wasp-drone

  Full third-party vendor census of the audited landing page after a real headless-browser load, including anything Google Tag Manager injects at runtime and content-injection/metadata-manipulation tools such as Search Atlas. Invoke as wave W1b in parallel with `stack-fingerprint-wasp-drone`. Do NOT j

• visual-funnel-wasp-drone

  25-page-depth visual customer-funnel audit using real desktop (1440x900) and mobile (390x844, real mobile UA) Chrome sessions. Invoke as part of wave W5's parallel wave, reading `02-positioning/` for the funnel definition. Do NOT complete a real purchase or submit a real lead form unless interactive

• web-security-posture-wasp-drone

  External, passive security-posture audit of a third-party site: headers, TLS coarse-check, cookies, CSP, platform exposure, client-side injection surface, and payment-path integrity at an observational level only, the highest-weighted category (20%) in the final score. Invoke as part of Wave 5's nin

Similar plugins