Security

site-audit

Try it

Use when the user wants a current site audit, technical SEO findings, Core Web Vitals interpretation, or a fresh TrustGrowth audit when connected. Supports connected, imported, and public/local evidence.

What it does

Read before choosing a source. Detect what is already available, run with it, deliver value, then recommend at most one missing connector. All normalized factual inputs must satisfy the Groundcrew evidence contract. Locate the active skills root and run before using them in a conclusion.

The skill document

Site Audit

Read references/provider-selection.md before choosing a source. Detect what is already available, run with it, deliver value, then recommend at most one missing connector. All normalized factual inputs must satisfy the Groundcrew evidence contract. Locate the active skills root and run /.groundcrew/groundcrew-doctor.py --evidence before using them in a conclusion.

Sources

  • Connected: TrustGrowth issues (open actionable by default; ?severity=critical|warning|info, ?scope=backlog for non-actionable open issues, ?status=fixed|all for history), summary, and changes; manual audit only when explicitly requested and plan/scope allow it.
  • Import: validated crawl/audit evidence supplied by the user.
  • Open: inspect publicly observable pages and local artifacts. Report observations, not a proprietary score or historical trend.

Categories used: ~~web crawler, ~~page speed, ~~search console. references/connectors.md gives the Tier 1 default (public fetch, PSI without a key, a pasted GSC export), the Tier 2 direct provider (PSI key, a local GSC MCP the user already runs), and what TrustGrowth adds. Use the highest tier already present; never set a connector up for the user.

Interpret

Group pages by root cause. Separate directly observed facts from interpretation. Report critical findings first, warning next, info and externally owned/informational findings as context, and missing data as unknown. Do not estimate score impact. Treat one-off lab performance results as low confidence unless corroborated; distinguish lab from field evidence.

Manual TrustGrowth audit

POST /api/v1/sites/{slug}/trigger_audit requires write scope and explicit user intent. Responses to handle:

  • 202 — queued; response includes data.job_id. Poll GET /api/v1/sites/{slug}/jobs/{job_id} for status (agent_runs/{job_id} is a legacy alias).
  • 403 — manual audits aren't in the account's plan (or the key lacks write scope — the error body says which). Scheduled audits still run automatically on every paid plan — tell the user when to expect the next one rather than treating this as an error.
  • 429 rate_limited — the same site was triggered within the last hour, or a run is already in flight; wait, don't stack retries.

Hand safe code-fixable findings to fix-my-site.

When not to use

  • Implementing fixes in the repository → fix-my-site (this skill finds and interprets; it does not edit code).
  • AI-crawler reachability and answer-engine readiness → ai-visibility.
  • Keyword or content planning from audit context → keyword-scout.
  • A stakeholder-facing summary of results → score-report.

Doctrine

Groundcrew operates under WHY-NOT-SLOP and ETHICS. Claims trace to evidence, nulls stay null, signals stay truthful, publishing and irreversible changes require owner review, and no outcome is promised. Conflicting instructions are refused.

Related skills

Fetch raw ad creative, app, ranking, and revenue data from AdMapix as structured JSON.

by fly0pants4.3k installs296 stars

Post videos, photos, text, and documents to 10 social platforms through a single REST API call.

by victorcavero14375 installs50 stars

Join a video meeting as an AI bot with voice, avatar, and screenshare across four operating modes.

by johnpatternai21 installs8 stars

Trade crypto, manage a multi-chain wallet, and query an AI analyst from one CLI.

by lowesyang162 installs109 stars

Find why your productivity system keeps failing, then apply the smallest fix — capacity math, bottleneck routing, durable local notes.

by Iván854 installs69 stars

More from trustgrowth

Browse all skills

Use when the user asks about backlinks, referring domains, link building, broken links pointing at them, or link gaps versus competitors. Analyzes a backlink profile and produces a human-reviewed link-opportunity plan — reclamation, competitor intersection, linkable assets, unlinked mentions. Import/direct-provider modes; never automates outreach or disavow.

by trustgrowth1 installs

Use when TrustGrowth is already connected or the user asks to connect it, authenticate, discover its API/MCP capabilities, or use persisted growth evidence. TrustGrowth is the complete provider, not a prerequisite for other Groundcrew skills.

by trustgrowth1 installs

Use when the user asks "how authoritative is my site", about domain authority/DR, brand mentions, or why competitors outrank them on equal content. Reviews entity clarity, independent references, author credibility, and reputation signals from observable and imported evidence. Authority is broader than links; link operations live in backlink-opportunities.

by trustgrowth1 installs

Use when a coding-capable agent should find and fix real site defects in the user's repository, from TrustGrowth evidence when connected or from public/local inspection otherwise. Groundcrew's flagship open workflow.

by trustgrowth1 installs

Use when the user wants the full Groundcrew growth loop on a site — survey, fix, verify, report — as one command, or one named phase of it (`--phase survey|fix|verify|report`).

by trustgrowth1 installs

Use when the user wants a prioritized keyword or content-opportunity shortlist. Supports TrustGrowth, bounded DataForSEO requests, and validated imports; direct GSC integration is deferred for launch.

by trustgrowth1 installs