Install
$ agentstack add skill-jeffli1993-seo-audit-skill-seo-audit-full ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
seo-audit-full — Advanced Full SEO Audit
This skill runs a full single-page SEO audit from the seo-audit-full directory. It does not route to seo-audit when only a URL is provided.
When to Use This Skill
Use seo-audit-full when the user asks for:
- "seo-audit-full"
- "full SEO audit"
- "advanced SEO audit"
- "technical SEO audit"
- "deep audit"
- "comprehensive SEO review"
- "audit everything"
URL-only requests are valid. When external datasets are not supplied, run the full public-signal workflow and clearly note missing data sources in the report.
Input Expected
| Input | Required | Notes | |-------|----------|-------| | Page URL | Yes | The primary page to audit | | Primary keyword | Recommended | Improves content relevance scoring | | PageSpeed API key | Yes | Required for full audit PageSpeed checks. Ask at the start and do not run PageSpeed without it. | | Raw HTML or page content | Optional | Enables more accurate content checks when supplied | | GSC / crawl / analytics data | Optional | Include when supplied, otherwise mark unavailable | | Competitor benchmark data | Optional | Include when supplied |
At the start of a full audit, ask the user for a PageSpeed Insights API key:
For PageSpeed checks, please provide a Google PageSpeed Insights API key.
Get one here: https://developers.google.com/speed/docs/insights/v5/get-started
Open "Acquiring and using an API key" → "Get a Key".
If you do not provide one, I will stop before running the full audit because
PageSpeed is a required full-audit module.
Do not run seo-audit-full PageSpeed checks without a PageSpeed API key supplied by --api-key, PAGESPEED_API_KEY, or GOOGLE_PAGESPEED_API_KEY. If the key is missing, stop and ask the user to configure it instead of rendering a full report with missing PageSpeed data.
Architecture: Full = Core + Performance + Advanced
┌─────────────────────────────────────────────────────────────┐
│ seo-audit-full Workflow │
│ │
│ Phase 1: Run core scripts (./scripts/) │
│ ┌──────────────────────────────────────────────────────┐ │
│ │ check-site.py → robots.txt, sitemap, 404, URL │ │
│ │ check-page.py → title, H1, meta desc, slug │ │
│ │ check-schema.py → JSON-LD validation │ │
│ │ fetch-page.py → raw HTML for analysis │ │
│ └──────────────────────────────────────────────────────┘ │
│ ↓ │
│ Phase 2: Run performance + full-only scripts (./scripts/) │
│ ┌──────────────────────────────────────────────────────┐ │
│ │ check-pagespeed.py → Lighthouse scores + metrics │ │
│ │ check-social.py → OG Tags + Twitter Card │ │
│ │ (more scripts added here as modules grow) │ │
│ └──────────────────────────────────────────────────────┘ │
│ ↓ │
│ Phase 3: LLM-only advanced checks │
│ ┌──────────────────────────────────────────────────────┐ │
│ │ E-E-A-T content quality scoring │ │
│ │ Duplicate content signals │ │
│ │ Anchor text quality assessment │ │
│ └──────────────────────────────────────────────────────┘ │
└─────────────────────────────────────────────────────────────┘
Output
Produce an Advanced Full SEO Audit Report by filling the template at [assets/report-template.html](assets/report-template.html), then save it to a file — never print raw HTML to the terminal.
File naming: reports/--full-audit.html
https://example.com/blog/best-tools → reports/example-com-blog-best-tools-full-audit.html
https://example.com/ → reports/example-com-full-audit.html
After saving, tell the user:
✅ Full Report saved → reports/example-com-full-audit.html
Open it now? (yes / no)
If yes → run: open reports/example-com-full-audit.html
Template placeholders — fill each independently:
| Placeholder | Content | |---|---| | {{summary_verdict}} | One sentence: total checks run, how many failed/warned/passed | | {{summary_critical_html}} | ` per critical item, or None | | {{summarywarningshtml}} | per warning item, or None | | {{summarypassinghtml}} | per passing check, or None | | {{pagespeedcheckshtml}} | Full PageSpeed module using check-pagespeed.py output | | {{sitecheckshtml}} | Site-level check tables | | {{eeatcheckshtml}} | E-E-A-T trust page table | | {{pagecheckshtml}} | Page-level check tables, including full-only additions | | {{priorityactionshtml}} | Ordered priority action list | | {{insights_html}}` | Optional finding walkthrough cards |
Scripts
Run full scripts from this directory. All output is structured JSON — use it directly as evidence.
Dependencies: pip install requests
Phase 1: Core scripts
# 1. site-level checks (robots.txt + sitemap.xml + 404 + URL canonicalization)
python scripts/check-site.py https://example.com
# 2. page-level checks (H1, title, meta description, canonical, URL slug)
python scripts/check-page.py https://example.com --keyword "primary keyword"
# 3. fetch raw HTML for downstream scripts
python scripts/fetch-page.py https://example.com --output /tmp/page.html
# 4. JSON-LD schema validation
python scripts/check-schema.py --file /tmp/page.html
Phase 2: Full-only scripts
# 5. PageSpeed / Lighthouse checks
python scripts/check-pagespeed.py https://example.com --strategy mobile --timeout 180 --api-key "USER_PROVIDED_KEY"
# If no key was provided, do not run this command. Ask the user to configure a PageSpeed API key first.
# 6. Social tags: OG + Twitter Card validation
python scripts/check-social.py --file /tmp/page.html
# Or directly from URL:
python scripts/check-social.py https://example.com
Each script exits with code 0 (all pass/warn) or 1 (any fail/error).
PageSpeed can take 200 seconds. Use a 180-second timeout by default. If it still times out, mark the Page Speed module as error and state that the PageSpeed API timed out; do not treat that as confirmed page performance failure. If PageSpeed fails because Google returns a quota/API-key error after a key was provided, keep the audit running and render the PageSpeed module as error with this instruction: Get a PageSpeed API key at https://developers.google.com/speed/docs/insights/v5/get-started → "Acquiring and using an API key" → "Get a Key".
Scope — Full Audit Check Whitelist
Full runs its own core checks plus the full-only items marked ★ below.
Site-Level Checks (in {{site_checks_html}})
Core checks:
- Sitemap URL Inventory · Staging Subdomain Indexation · robots.txt · sitemap.xml · 404 Handling · URL Canonicalization · i18n / hreflang
Staging Subdomain Indexation rules:
- Check common staging/test hosts before robots.txt:
test.,staging.,dev.,preview.,beta.,uat. - Fail when a staging/test subdomain is publicly accessible, closely mirrors the production site, and is not protected by authentication,
noindex, or a blockingrobots.txt. - Warn when a staging/test subdomain is publicly accessible but similarity or index protection cannot be confirmed.
- Pass when no public staging/test subdomain is detected, or detected staging hosts are protected by authentication, non-200 access,
noindex, orDisallow: /. - Explain the impact as duplicate indexable pages: Google may treat
test.example.comandwww.example.comas separate but near-identical URLs, splitting ranking signals and competing with the production site. - Recommended fixes: add Basic Auth/password protection first; also block crawlers on the staging host with
User-agent: *+Disallow: /; add page-levelnoindexif pages can still be accessed.
Sitemap URL Inventory rules:
- Place this as the first module in
{{site_checks_html}}, before the Crawlability table. - Render it as its own table with columns: Directory · URL Count · Page Type · Example Page.
- Use
check-site.pysitemap_inventoryoutput to summarize first-level directories, URL counts, inferred page types, and one representative example URL. - Treat this as a site-level map, not a pass/fail single-page SEO audit.
- Use status
infounless sitemap URLs cannot be parsed; do not penalize a site for having many or few URLs in a directory without deeper evidence. - Always include a next-step note: the user can continue with deeper full audits by selecting representative sample URLs from major directories such as
/blog/,/tools/,/alternatives/,/templates/, or/use-cases/.
Page Speed Checks (in {{pagespeed_checks_html}})
Full-only:
- Lighthouse category scores: Performance · Accessibility · Best Practices · SEO
- Lab metrics: FCP · LCP · TBT · CLS · Speed Index
- Final URL and screenshot availability
E-E-A-T Checks (in {{eeat_checks_html}})
Core checks:
- About Us · Contact · Privacy Policy · Terms of Service · Media/Partners (only if present)
Contact logic (Contact row only):
- A dedicated
/contactpage is not required - Pass if contact is reachable via any of: dedicated contact page (HTTP 200) · About page with contact details · footer/nav mailto, email, social links, or contact form
- Fail only when no contact pathway exists anywhere on the site
- Missing
/contactalone is not a fail when About or footer/nav already expose contact info
E-E-A-T infrastructure rules — two layers per trust page:
- Layer 1 — Exists: HTTP 200 for the trust page URL (Contact uses Contact-specific rules above)
- Layer 2 — Reachable: linked from footer or main nav
| Page | Required | |---|---| | About Us | Yes | | Contact | Yes — dedicated page optional; About or footer/nav contact details satisfy this | | Privacy Policy | Yes | | Terms of Service | Yes | | Media / Partners | No — include only if present |
Status rules (About, Privacy, Terms, Media/Partners):
- Page missing (non-200) → Fail
- Page exists but not linked in footer/nav → Warn
- Page exists and linked in footer/nav → Pass
- Optional page missing → skip, do not include row
Contact-specific rules:
- Try common paths (
/contact,/contact-us) — HTTP 200 counts as Exists - If no contact page, check the About page body for email, social, or contact details
- Also scan homepage footer and nav for
mailto:, visible email, social links, or a contact form - Exists Pass if any contact pathway is found
- Exists Fail only when no contact information is found anywhere
- Reachable Pass if a contact page link or contact details appear in footer/nav
- Reachable Warn if contact is only reachable inside About page content, not directly in footer/nav
- Do not recommend creating
/contactwhen About or footer already expose contact info
Page-Level Checks (in {{page_checks_html}}), output in this exact order:
Core checks: URL Slug · Title Tag · Meta Description · H1 Tag · Canonical Tag · Image Alt Text · Word Count · Keyword Placement · Heading Structure · Internal Links · Schema (JSON-LD)
Schema (JSON-LD) rules:
- Treat Schema as a quality check, not only a presence check.
- Validate JSON-LD parseability, expected
@type, required fields, recommended rich-result fields, nested fields, and primary-type conflicts. - Fail when JSON-LD is invalid, the expected schema type is missing, required fields are missing, or localized schema clearly points to the wrong language/URL.
- Warn when recommended fields are missing, nested fields are incomplete, multilingual pages lack
inLanguage, or localized schema cannot be fully confirmed. - Pass only when the expected schema type is present, required fields are present, no conflicts are found, and localized schema matches the current page language/URL when applicable.
- For multilingual pages, each language version should have its own schema with matching
inLanguage, language-specific headline/description where present, andurl/mainEntityOfPagepointing to the current localized canonical URL.
★ Full-only additions:
- OG Tags — og:title, og:description, og:image, og:type, og:url presence and validity
- Twitter Card — twitter:card type, title/description/image (with OG fallback detection)
How to Use Script JSON Output
Same rules across full audit modules — map each field's status directly to the report check table:
status→pass/warn/fail/error→ badge in reportdetail→ starting point for Evidence line- Do not contradict script output unless you have additional observable evidence
For check-site.py output:
staging_subdomains.status→ Staging Subdomain Indexation row statusstaging_subdomains.detail→ Staging Subdomain Indexation row detailstaging_subdomains.public_hosts→ evidence for public staging/test hostsstaging_subdomains.similar_hosts→ fail evidence for production-like staging duplicatesrobots.status→ robots.txt row statussitemap.status→ sitemap.xml row statussitemap_inventory.status→ Sitemap URL Inventory module statussitemap_inventory.directories[]→ table rows withpath,url_count,page_type, andexample_urlsitemap_inventory.detail→ short explanatory note below the inventory table
For check-schema.py output:
status→ Schema (JSON-LD) row statusdetail→ Schema (JSON-LD) row detailparse_errors→ fail evidence for malformed JSON-LDschemas[].fields_missing→ fail evidence for missing required schema fieldsschemas[].recommended_missingandschemas[].nested_issues→ warning evidencelocalized_schema.status→ language/URL alignment status for multilingual schemalocalized_schema.issues→ evidence for schema language or URL mismatch
For check-social.py output:
og.status→ OG Tags row statustwitter_card.status→ Twitter Card row statusog.fields.*→ individual field details for the detail celltwitter_card.fields.*→ individual field details, note fallback fields
For check-pagespeed.py output:
status→ overall Page Speed statuscategory_status→ Lighthouse Scores badge statusmetric_status→ Core Lab Metrics badge statusfinal_url→ Final URL linecategories.performance.score→ Performance scorecategories.accessibility.score→ Accessibility scorecategories["best-practices"].score→ Best Practices scorecategories.seo.score→ SEO scorecompact_metrics.fcp.display_value→ FCPcompact_metrics.lcp.display_value→ LCPcompact_metrics.tbt.display_value→ TBTcompact_metrics.cls.display_value→ CLScompact_metrics.si.display_value→ Speed Indexscreenshottruthy → Screenshot available
Do not use overall status for the Lighthouse Scores badge. Category scores use Lighthouse thresholds: 90–100 pass, 50–89 warn, 0–49 fail. Example: Performance 60, Accessibility 84, Best Practices 100, SEO 100 means category_status is warn. If LCP or Speed Index fails, metric_status and overall status may be fail while the Lighthouse Scores panel remains warn.
Inside {{pagespeed_checks_html}}, include a short Priority Actions list after the score/metric cards. Keep it to 2–4 concise items based on failing or warning PageSpeed fields:
- LCP slow → optimize hero media, preload critical image, reduce render-blocking CSS
- Speed Index slow → defer non-critical scripts and reduce above-the-fold JS/CSS
- TBT high → split long tasks and delay third-party tags
- Performance score warning/fail → prioritize the biggest Lighthouse opportunities
Always include the official diagnostic link: https://pagespeed.web.dev/
LLM Review Instructions
Core
…
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: JeffLi1993
- Source: JeffLi1993/seo-audit-skill
- License: MIT
- Homepage: https://nanoskill.ai/skills/seo-audit
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.