squirrelscan 🐿️

we also have one of those fancy videos .. intro to squirrelscan, a website audit tool for seo, performance, security and more that integrates into your coding agent 🚀🥜 🐿️

@Dalton_Walsh Yes! Working on a new version at the moment 🙂 should be a beta up this week! Bit of a re-arch

@squirrelscan_ hey @squirrelscan_ are you still working on this project? i thought it was a great idea and have used it a lot myself

new html output report format based on feedback: reports.squirrelscan.com/SJEItpldwW

@getruggedtoo github.com/squirrelscan/s… thanks not really setup for donations at the moment!

we also have one of those fancy videos .. intro to squirrelscan, a website audit tool for seo, performance, security and more that integrates into your coding agent 🚀🥜 🐿️

@liran_tal @rauchg @SocketSecurity @snyksec @GenDigitalInc @andrewqu It’s a false positive because it saw an external url - but it’s not the agent requesting it - it’s our cli

@squirrelscan_ @rauchg @SocketSecurity @snyksec @GenDigitalInc @andrewqu Well: A. it's a warning level audit result that is there to warn users of potential risk B. did you read Adnan's post-mortem on the Cline compromise from a couple of days ago? it's exactly the type of risk that the Snyk warning is alerting for Does that make sense?

We partnered with @socketsecurity, @snyksec, and @gendigitalinc to continuously audit Skills.sh for security vulnerabilities. There are now 62,000+ skills in the open ecosystem

@liran_tal @rauchg @SocketSecurity @snyksec @GenDigitalInc @andrewqu Yes staying on top of the latest prompt attacks. Squirrel treats all external urls as untrusted content. Sits between the site and the agent and almost nothing bar urls, some attr names etc. are passed through and they’re *heavily* filtered and escaped

@rauchg @SocketSecurity @snyksec @GenDigitalInc @andrewqu Clear with the other two

@rauchg @SocketSecurity @snyksec @GenDigitalInc @andrewqu Thanks snyk - that’s kinda the point of what our app does

@saranshhx FTP

where do you store your code? 1. Github ? 2. Gitlab ? 3. Bitbucket ?

this is part of the 0.0.38 release pushed a moment ago. update with: squirrel self update release notes are here: squirrelscan.com/releases

published squirrelscan reports now support multiple output formats via URL extension: /SJEItpldwW → html (default) /SJEItpldwW.json → json /SJEItpldwW.md → markdown /SJEItpldwW.txt → plain text /SJEItpldwW.xml → xml /SJEItpldwW.llm → token-optimized for AI agents same report, any format. pipe the .llm straight to claude or a coding agent: curl -s reports.squirrelscan.com/SJEItpldwW.llm | claude "prioritize fixes"

@audiencon Increasing your vercel bill

What’s your project about? Explain it badly 😂👇

if you're an openclaw / clawdbot user - squirrelscan is now in the openclaw directory as a skill. auto-audit and fix your websites for performance, security, seo, etc. issues 🐿️🦞 clawhub.ai/nc9/squirrelsc…

squirrelscan is free and auto-updates. existing users just run: squirrel self update new? grab it at squirrelscan.com/download github: github.com/squirrelscan/s… docs: docs.squirrelscan.com shipping daily. more rules, more integrations, more 🐿️ energy coming

our agent skill just crossed 14.9k weekly installs 🌳 works with Claude Code, Codex, Cursor, Windsurf etc. any AI coding agent. details here: skills.sh/squirrelscan/s…

lots of new features to cover for squirrelscan 🌰📷 you can now publish audit reports to the web with a single flag shareable link with your health score, full breakdown online. SEO audit -> published report in seconds