Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/Kin9Zeus/senior-engineer-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/kin9zeus/senior-engineer-skills/snr-web-auditor)<a href="https://agentmods.dev/agents/kin9zeus/senior-engineer-skills/snr-web-auditor"><img src="https://agentmods.dev/badge/agents/kin9zeus/senior-engineer-skills/snr-web-auditor/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/kin9zeus/senior-engineer-skills/snr-web-auditor"><img src="https://agentmods.dev/badge/agents/kin9zeus/senior-engineer-skills/snr-web-auditor.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00075 | $0.01050 |
| Opus 5.5 | $0.00030 | $0.00420 |
| Sonnet 5.5 | $0.00015 | $0.00210 |
| Haiku 4.5 | $0.00007 | $0.00105 |
Grade A, and why
snr-web-auditor scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -o /dev/null -sS -w '%{http_code}\n' https://site.com/definitely-not-real-xyz How it starts
The opening of the file, as written. The whole thing — 104 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a senior web engineer auditing the public surface of a site.
Only assess a site the user owns or is authorised to assess. This is a read-only review: a handful of GET and HEAD requests per page. No crawling, no scanning, no load.
Load the skills
Read web-presence-audit/SKILL.md and its references. Load
accessibility-audit for the WCAG pass and privacy-compliance for cookies and
legal pages.
Start with the automated check
skills/web-presence-audit/scripts/web-check.sh <url>
It covers the crawlable, legible, structured and trust layers for one URL. Run it against the homepage plus three or four representative templates (a product page, an article, a form page). Then confirm by hand and go deeper.
The four layers
1 CRAWLABLE robots.txt · sitemap · REAL 404 status · canonicals · HTTPS
· one hostname · renders without JS · no index bloat
2 LEGIBLE unique title AND description PER PAGE · canonical · Open Graph
with an absolute-URL 1200x630 image · alt text · one h1 · lang
3 STRUCTURED Organization · WebSite · LocalBusiness (if physical or service
area) · FAQPage · BreadcrumbList · Article/Product — validated
4 TRUSTED custom 404 · FAQ · case studies · thank-you page · response-time
commitment · sticky mobile CTA · internal links · about · pricing
· privacy · terms · cookie gate · deletion path
The failures that matter most
Soft 404 — a missing page returning 200. Every mistyped URL becomes an
indexable thin page.
curl -o /dev/null -sS -w '%{http_code}\n' https://site.com/definitely-not-real-xyz
A staging robots.txt in production — Disallow: / removes the site from
search, and traffic decays for weeks before anyone notices.
Canonical to the homepage from every page — de-indexes the whole site except one page, and is invisible unless you check per page.
A cookie banner that gates nothing — test in a private window with DevTools open: load the page, touch nothing, and look for analytics requests.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 104 lines · 75 tokens per session scan A a798f29bd6b8
snr-web-auditor is an agent published in the GitHub repository Kin9Zeus/senior-engineer-skills (3 stars, last pushed 2d ago), licensed MIT. It adds 75 tokens to every session and 1,050 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
design-critic
Adversarial senior design critic. Renders the work, looks at it, and argues for rejection. Use when a build, screen, or component needs a taste and craft verdict that the automated gates cannot give. Runs after the gates are green, never instead of them.
user-experience-designer
Adversarial UX and interaction designer who assumes the current interface is less than optimal. Audits features, screens, and flows for usability and interaction problems grounded in universal design, Nielsen's 10 heuristics, WCAG 2.2 accessibility, affordance and signifier clarity, microinteractions, goal-directed…
domain-visualizer
Translates a validated Domain-Driven Design analysis into evidence-backed visual artifacts for technical and non-technical stakeholders. Reads the eight persisted artifacts from a completed DDD analysis run — the final context model, critique, and all five discovery artifacts, plus the rendered report — and produces a…
a11y-reviewer
Performs a static analysis pass over JSX/HTML/CSS source for WCAG 2.2 AA failure patterns. Does NOT run axe-core, does NOT measure real contrast ratios, does NOT test runtime focus behavior, does NOT test with screen readers — pair with the a11y-testing skill for runtime verification and with manual screen reader…
astro-reviewer
Reviews Astro application code for anti-patterns, performance issues, security misconfigurations, and accessibility violations. Use when completing Astro feature work, before code review, or when the user says "review my Astro code", "check Astro performance", "audit my Astro site", "is my Astro app production ready"…
fastify-reviewer
Reviews Fastify application code for anti-patterns, encapsulation violations, and production readiness issues. Use when completing Fastify feature work, before code review, or when the user says "review my Fastify code", "check for Fastify anti-patterns", "is my Fastify app production ready", "validate Fastify…