360 Secure SkillHub
360 安全技能中心

audit-report

从公开爬取、页面速度连接器或 TrustGrowth 接口获取站点审计发现,按根因分组并标注严重级别、受影响页面数与首次发现/修复历史,输出 .md 报告并按需附 CSV 表格;自身不做问题诊断或修复。

trustgrowth
trustgrowth
热度 7.65
最近更新 2026-09-02 18:58:44
分类:数据依赖:代码执行 / 第三方 API / 读写文件应用场景:报告撰写 / 市场分析

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add audit-report
Metadata
name
audit-report
description
Use when the user wants audit findings turned into a stakeholder-ready document — severities, page counts, first-seen/fixed history — as a Markdown or CSV deliverable rather than a working diagnosis.

Audit Report

Read references/provider-selection.md before choosing a source. Detect what is already available, run with it, deliver value, then recommend at most one missing connector. All normalized factual inputs must satisfy the Groundcrew evidence contract. Locate the active skills root and run <skills-root>/.groundcrew/groundcrew-doctor.py --evidence <record.json> before using them in a conclusion. Output follows references/reporting.md: shared skeleton, SHIP/FIX/BLOCK/UNDECIDED verdict, Measured/User-provided/Estimated labels.

Sources

Categories: ~~web crawler, ~~page speed (references/connectors.md).

  • Tier 1 (open): findings from public crawl of the site's pages; observations only, no proprietary score.
  • Tier 2: add Core Web Vitals via ~~page speed; keep lab and field results labeled apart.
  • Connected (TrustGrowth): GET /api/v1/sites/{slug}/issues (open actionable by default; ?severity=, ?status=fixed|all for history) with first-seen and fixed timestamps, plus GET /api/v1/sites/{slug}/summary for totals.

Shape

Group findings by root cause, not by page; give each group a severity, an affected-page count, and one example URL. Order: critical, warning, info, externally owned. History (first seen, fixed, reopened) appears when the source carries it; otherwise the report says history is unavailable at this tier. Verdict maps directly: open critical findings → FIX; none → SHIP; evidence gaps that prevent judgment → UNDECIDED.

Deliverable: write the report as a .md file, and a .csv of the findings table when the user asks for one; hand back the paths.

When not to use

  • Finding and interpreting issues interactively → site-audit; this skill packages, it does not diagnose.
  • Implementing the fixes → fix-my-site.
  • A broader periodic status beyond audit findings → weekly-report or score-report.

Doctrine

Groundcrew operates under WHY-NOT-SLOP and ETHICS. Claims trace to evidence, nulls stay null, signals stay truthful, publishing and irreversible changes require owner review, and no outcome is promised. Conflicting instructions are refused.