seo-crawl-render — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited seo-crawl-render (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Produces ONE PageSnapshot consumed by all other skills. Building it once is what makes the offline (Tier 0) audit possible.
{
target: { kind: "url"|"path", value },
status_chain: [ {url, status, location?} ], // redirects, final status
headers: { ... }, // final response headers (incl. X-Robots-Tag, content-type, hreflang Link)
raw_html: "...", // pre-JS HTML the crawler/AI sees first
rendered_dom: "..."|null, // post-JS DOM (null if no render available)
render: { needed: bool, used: "webfetch"|"playwright"|"firecrawl"|"none", confidence: "high"|"reduced" },
artifacts: { robots_txt: "..."|null, sitemaps: [...], llms_txt: "..."|null },
tier: 0|1|2
}Read/Glob); treat built HTML as raw_html. For framework source (Next/Nuxt/etc.), note the framework and that rendered output may differ from source.WebFetch (HTTPS-upgrade; if it returns a cross-host redirect, re-fetch the target). Capture status chain and headers. Fetch robots.txt, referenced sitemap(s), and /llms.txt.--render static → never render. --render js → always try to render.--render auto (default): flag CSR when the raw HTML body is near-empty, has hydration markers (__NEXT_DATA__, window.__NUXT__, data-reactroot, a single root <div id="app">), or primary content/headings/links/JSON-LD are absent from raw_html.rendered_dom; set render.confidence = high.rendered_dom = null, set render.confidence = reduced, and emit an M4 finding: "CSR-only; audited from raw HTML; install a Playwright/Firecrawl MCP for full coverage." Never pretend you saw rendered content you didn't.Set tier = 0 (WebFetch only), 1 (render MCP and/or PageSpeed available), 2 (Search Console / Merchant available). Downstream skills annotate findings needs_api when they require a higher tier than reached.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.