
Automated OWASP Top 10 security audit with severity ratings, CWE mappings, and remediation code.

Defensive application-security auditing: turns a repo, manifest, or code snippet into an actionable report—dependency vulnerabilities, leaked secrets, insecure code patterns, and config hardening—mapped to OWASP Top 10 and ranked by severity. Finds risk and the fix only, never attack content.

A scan tells you what is wrong. This tells you what to do. Same engine as the ADA Website Risk Scanner — 14 WCAG 2.2 AA check families. But instead of a defect list, you get a work plan: findings grouped into batches, ordered by exposure reduced per hour of developer time, each with before/after code, effort estimate, required skill, and a verification step. Three phases. Quick wins first. A project manager can assign it as-is.

Tool voor sitearchitectuur en interne links voor SaaS-, e-commerce-, content-, documentatie-, lokale en abonnementssites, voor nieuwbouw, herstructureringen en SEO-audits. Accepteert sitemap, paginalijst, GSC-fouten of een beschrijving, en levert structuuraudit, hiërarchieplan en linkaanbevelingen. Detecteert verweesde pagina's, verkeerd geplaatste URL's en geringe diepte, en vertaalt GSC-signalen naar duidelijke fixes.

提供一個網頁和目標客群,找出最影響 Google 與 AI 理解的問題,列出最多 5 個優先修改,並產生可直接使用的標題、網站描述與首屏文案。不亂猜排名。

Built from real-world Linux administration and security hardening experience. This skill focuses on practical Debian and Ubuntu server security reviews for self-hosters, system administrators and small businesses. Instead of making risky automatic changes, it identifies security issues, explains their impact and provides clear, actionable hardening recommendations.

Academic sanity-check with interactive HTML dashboard. Detects look-ahead bias, over-parameterization, and benchmarks against 10 canonical blueprints via animated SVG gauges and color-coded KPI cards. Parses natural language, code, or CSV uploads. Output auto-adapts (EN/ZH-TW/ZH-CN). Built on De Prado (2018). For students and strategy developers. Not financial advice.

This is the scoring reference the agent uses to turn raw crawl/API data into prioritized findings. Keep this file as the single source of truth — update it whenever a real audit reveals a false positive or a missing check. Scope covered: Crawlability & Indexation, Performance (Core Web Vitals), Structure & Markup. (Mobile/Architecture can be added in a later version.)
