🥜 cli website audit tool (seo, security, perf, etc.) built for coding agents - https://teapawt.net/t.co/9CbqAa5ftJ
tree
Joined January 2026
- Tweets169
- Following29
- Followers50
- Likes58
Pinned Tweet
we also have one of those fancy videos .. intro to squirrelscan, a website audit tool for seo, performance, security and more that integrates into your coding agent 🚀🥜 🐿️
We audited 3 months worth of Product Hunt launches with squirrelscan (~20k sites)
69 sites were leaking real credentials or user data to every visitor. A live Stripe secret key. Supabase service_role keys. A dump of user records with password hashes.
🧵
Reporting it was the hardest part. 0 of the 69 published a valid security.txt, and 92% of all launches have none.
The disclosure paradox: owners who reply and fix get named and credited. Owners who ignore you stay anonymous, because naming them points attackers at a live hole.
Check yours before launch day, not after:
squirrel audit your-launch.com
Full write-up, method and every chart:
squirrelscan.com/blog/produc…
🥜💅
Your coding agent can write the fix. It still needs to find the website problem.
squirrelscan is an open-source CLI website QA tool for builders using coding agents.
It helps you audit a site and give your agent specific fixes by crawling it against 300+ rules across SEO, performance, security, accessibility, and agent experience.
Key features:
• Broad audit coverage – 300+ rules across 21 categories cover website QA in one CLI
• Agent experience checks – tests whether agents can discover, read, and act on your site
• MCP and skills support – connect the tool to coding agents and run audit-and-fix workflows
• Incremental crawling – uses ETag, Last-Modified, and content hashing, with checkpoints for resuming
• Flexible reports – export findings to console, JSON, HTML, Markdown, text, LLM, or XML formats
It’s open-source (MIT license).
Link in the reply 👇
Turns out detecting broken links is haaaard.
We shipped a link checker that cried wolf so often we had to rebuild it. Meet squirrel perch.
Thread on why it's hard now, and what we did about it 🧵
Pro users in cloud get always-on link monitoring: if a link goes dead, you get an alert. Email for now, MCP message alerts soon.
Coming soon: when a dead link has a copy in the web archive, we'll suggest the archived link so you can swap it in :)
The full write-up, with the honest caveats and the numbers:
squirrelscan.com/blog/squirr…
Heads up: the cli without signing in checks from your own machine and lots of sites block that, so expect false positives. Sign in and checks go through our cluster.
