Audit your own site — the free Site Advice skill

We don't run a scanner that pokes at your site from our servers. Instead, we've distilled all 50 checks into a free AI skill you download and run yourself — against your own website, through an assistant you choose. The skill contains no upload mechanism: it never sends your domain or your results to Site Advice.

Download the skill (.md) Read all 50 tips

What it does

Give it a domain and it gathers public evidence — the homepage and a few inner pages, response headers, DNS answers (A/AAAA and MX records, published SPF and DMARC policies, DKIM where you supply a selector or a sent message), robots.txt, sitemap.xml, titles and structured data, image formats and sizes — then works through the eight areas we cover:

Domains & DNS — naming, records and DNSSEC, canonical host, plus registrar and renewal controls you confirm yourself
Hosting — reachability, HTTPS, headers
Security — patching surface, directory exposure, privacy
Email & Deliverability — SPF, DKIM, DMARC
SEO — titles, structure, sitemaps, hreflang
Performance — images, caching, code weight, CDN
Design & UX — navigation, forms, accessibility, valid HTML
Marketing — follow-up, sharing, trust, local reach

You get a scored report: every check marked PASS / CHECK / FIX / N/A with a one-line reason and a concrete next step where one is needed, plus a "top 3 to fix first" shortlist. The score counts confirmed passes — items marked CHECK await your confirmation and lower the score until reviewed, which makes it an evidence score, not a verdict on your site's health.

Two honest boundaries. First, run it only against a site you own or are authorized to test: the audit makes active (non-destructive) requests, including probes for commonly exposed files, which can show up in logs or trip security monitoring. Second, it is a point-in-time review of sampled public evidence — genuinely useful, and still not a penetration test, an accessibility-conformance audit, or a compliance opinion.

How to use it

With Claude Code:

Save the downloaded file as ~/.claude/skills/site-advice-audit/SKILL.md.
Start Claude Code and ask: "Run the site-advice-audit skill against yourdomain.be."
It gathers the evidence, applies the checks, and drafts the report.

With another tool-enabled assistant: load the file the way that agent loads a reusable Markdown prompt or skill, then ask it to audit your domain.

Without installing anything: copy the file's contents into a new chat and add: "Audit yourdomain.be using these instructions." If the assistant can't fetch URLs or query DNS, it will ask you for the evidence — headers, records, page source — and work from what you paste.

A tool-enabled assistant automates the public parts (headers, DNS over HTTPS, HTML inspection) and flags what needs your judgment or insider knowledge. Treat its conclusions as leads to verify — assistants can misread a header or miss a redirect — and double-check high-impact recommendations (DNS, email authentication, security headers, caching, redirects) with whoever administers them before changing anything.

Honest by design

It runs through your assistant against your site — we operate no audit service and never see your results. Know where the data does go: to your own site, to the DNS-over-HTTPS and TLS-checking services the skill uses, and to your AI provider and its tools as part of the conversation — worth a moment's thought before auditing anything sensitive. The skill is free to use and share. Every check links back to the full explanation here on the tips.