Agent skills for squirrelscan website audit tool
$git clone https://github.com/squirrelscan/skillsInstalls into the current project.
Install skills by running `git clone https://github.com/squirrelscan/skills`, then use it for the current task and follow its documentation at https://github.com/squirrelscan/skills.
| 1 |  |
| 2 | |
| 3 | # squirrelscan Skills & Plugins |
| 4 | |
| 5 | **Website audits for AI agents: skills, plugins, and MCP in one repo** |
| 6 | |
| 7 | ## What is squirrelscan? |
| 8 | |
| 9 | [squirrelscan](https://squirrelscan.com) is a website audit tool built for AI agents. It crawls a site, analyzes every page against 260+ rules across SEO, performance, security, accessibility, content, and more, and returns a health score plus concrete, fixable issues. |
| 10 | |
| 11 | **Features:** |
| 12 | |
| 13 | - 260+ audit rules across 21 categories |
| 14 | - Leaked secrets detection (96 patterns: OpenAI, Anthropic, AWS, Stripe, and more) |
| 15 | - Multiple output formats: console, text, json, markdown, llm, html |
| 16 | - Diff reports for regressions between audits |
| 17 | - LLM-native output for AI-assisted debugging and optimization |
| 18 | - Optimized for CI/CD pipelines and automation |
| 19 | |
| 20 | ## What's in this repo |
| 21 | |
| 22 | | Skill | What it does | |
| 23 | |-------|--------------| |
| 24 | | [`squirrelscan`](skills/squirrelscan/SKILL.md) | Operate the CLI: install, login, run audits, publish reports, credits, API keys, MCP setup, config, troubleshooting | |
| 25 | | [`audit-website`](skills/audit-website/SKILL.md) | The fix loop: audit a site, map findings to code, fix in batches, re-audit until it scores well | |
| 26 | |
| 27 | The repo is also a **Claude Code plugin + marketplace** and a **Cursor plugin**, bundling both skills and the hosted squirrelscan MCP server. |
| 28 | |
| 29 | ## Prerequisites |
| 30 | |
| 31 | All skills drive the **squirrel CLI**, which must be installed and in PATH. |
| 32 | |
| 33 | **Install:** [squirrelscan.com/download](https://squirrelscan.com/download) |
| 34 | |
| 35 | **Verify:** |
| 36 | ```bash |
| 37 | squirrel --version |
| 38 | ``` |
| 39 | |
| 40 | ## Installing |
| 41 | |
| 42 | Pick the path for your tool: |
| 43 | |
| 44 | | Tool | Install | |
| 45 | |------|---------| |
| 46 | | Any agent (Agent Skills standard) | `npx skills add squirrelscan/skills` | |
| 47 | | Claude Code | `/plugin marketplace add squirrelscan/skills` then `/plugin install squirrelscan@squirrelscan` | |
| 48 | | Cursor | `npx skills add squirrelscan/skills`, or the plugin / MCP deeplink below | |
| 49 | | OpenAI Codex | `npx skills add squirrelscan/skills` (lands in `.agents/skills/`) | |
| 50 | | squirrel CLI | `squirrel skills install` | |
| 51 | | Manual | clone + symlink `skills/*` into your agent's skills dir | |
| 52 | |
| 53 | ### Agent Skills via npx (works everywhere) |
| 54 | |
| 55 | ```bash |
| 56 | npx skills add squirrelscan/skills |
| 57 | ``` |
| 58 | |
| 59 | Installs both skills (`squirrelscan` and `audit-website`) for whichever agents you select: Claude Code, Codex, Cursor, Gemini CLI, Amp, and more. Skills follow the [Agent Skills](https://agentskills.io) standard, so the same `SKILL.md` works across tools. To install just one skill: |
| 60 | |
| 61 | ```bash |
| 62 | npx skills add squirrelscan/skills --skill audit-website |
| 63 | ``` |
| 64 | |
| 65 | ### Claude Code plugin (recommended for Claude Code) |
| 66 | |
| 67 | ``` |
| 68 | /plugin marketplace add squirrelscan/skills |
| 69 | /plugin install squirrelscan@squirrelscan |
| 70 | ``` |
| 71 | |
| 72 | One step installs both skills and connects the hosted squirrelscan MCP server. Updates ship automatically with new commits to this repo. |
| 73 | |
| 74 | ### Cursor |
| 75 | |
| 76 | Three options, lightest to fullest: |
| 77 | |
| 78 | 1. **Skills**: `npx skills add squirrelscan/skills`. Cursor reads Agent Skills from `.cursor/skills/`, `.agents/skills/`, and their `~/` equivalents (it also picks up `~/.claude/skills/`). |
| 79 | 2. **MCP only, one click**: [Add squirrelscan MCP to Cursor](cursor://anysphere.cursor-deeplink/mcp/install?name=squirrelscan&config=eyJ1cmwiOiJodHRwczovL21jcC5zcXVpcnJlbHNjYW4uY29tL21jcCJ9) |
| 80 | 3. **Plugin**: this repo is also a Cursor plugin (`.cursor-plugin/`) bundling both skills and the MCP server, for install via the Cursor Marketplace. |
| 81 | |
| 82 | ### OpenAI Codex |
| 83 | |
| 84 | Codex reads skills from `.agents/skills/` (project) or `~/.agents/skills/` (global). `npx skills add squirrelscan/skills` installs there, or clone and symlink the `skills/*` directories. |
| 85 | |
| 86 | ### From the squirrel CLI |
| 87 | |
| 88 | ```bash |
| 89 | squirrel skills install |
| 90 | squirrel skills update |
| 91 | ``` |
| 92 | |
| 93 | ### Manual |
| 94 | |
| 95 | ```bash |
| 96 | git clone https://github.com/squirrelscan/skills.git |
| 97 | ``` |
| 98 | |
| 99 | Then copy or symlink `skills/squirrelscan` and `skills/audit-website` into your agent's skills directory (`make link` does this for Claude Code and `.agents/skills` consumers). |
| 100 | |
| 101 | ## MCP server |
| 102 | |
| 103 | The hosted MCP server lives at `https://mcp.squirrelscan.com/mcp` (streamable-http; OAuth or `Authorization: Bearer sq_...` API key). A local stdio server is available via `squirrel mcp`. Docs: [docs.squirrelscan.com/developers/mcp](https://docs.squirrelscan.com/developers/mcp) |
| 104 | |
| 105 | ## Example prompts |
| 106 | |
| 107 | ``` |
| 108 | Audit this website and fix all errors and warnings |
| 109 | ``` |
| 110 | |
| 111 | ``` |
| 112 | Run an audit on example.com and show me the top 5 critical issues |
| 113 | ``` |
| 114 | |
| 115 | ``` |
| 116 | Check my site for broken links and leaked secrets |
| 117 | ``` |
| 118 | |
| 119 | ``` |
| 120 | Re-audit after the deploy and diff against the last report |
| 121 | ``` |
| 122 | |
| 123 | ## Contributing |
| 124 | |
| 125 | Contributions are welcome! To suggest new skills or improvements: |
| 126 | |
| 127 | 1. Open an issue to discuss your idea |
| 128 | 2. Fork this repository |
| 129 | 3. Create a feature branch |
| 130 | 4. Submit a pull request |
| 131 | |
| 132 | All skills follow the [Agent Skills Standard](https://agentskills.io/specification). |
| 133 | |
| 134 | ## License |
| 135 | |
| 136 | MIT License — See [LICE |