sitemap-audit

sitemap-audit is a skill for Claude Code from nowork-studio/notfair-plugin. It costs 229 tokens per session (1,225 once invoked), scanned A, original, MIT.

An audit of an XML sitemap, a file that lists the website pages search engines should discover. It finds the sitemap, checks its format and limits, and compares its URLs with the site's real pages and indexing signals.

In plain words
What is it for?
Use it to inspect robots.txt and sitemap files, check URL status, and reconcile submitted pages with Google Search Console data when connected.
Why use it?
It identifies broken, redirected, excluded, or missing URLs that can waste search-engine crawling and slow page discovery.

Skill for Claude Code

Written for Claude Code: argument-hint in frontmatter.

Part of the notfair plugin — 52 skills, 1 MCP server shipped together

Good fit Use it to inspect robots.txt and sitemap files, check URL status, and reconcile submitted pages with Google Search Console data when connected.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/nowork-studio/notfair-plugin/sitemap-audit
About the project

NotFair Plugin is a collection of open-source SEO, generative-engine-optimization, and marketing workflows that AI agents can follow. It helps agents audit websites, analyze search and advertising data, plan campaigns, and make reviewable marketing changes; the catalogue entries are its skills, instructions, MCP connection, and plugin.

nowork-studio/notfair-plugin · 3,662 stars · on GitHub · notfair.co

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add nowork-studio/notfair-plugin --skill sitemap-audit
Clone the repo
git clone --depth 1 https://github.com/nowork-studio/notfair-plugin

Made for: Claude Code.

Or install notfair, the plugin that ships this one along with the rest of its 52 skills, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for sitemap-audit

README.md
[![agentmods](https://agentmods.dev/badge/skills/nowork-studio/notfair-plugin/sitemap-audit/github.svg)](https://agentmods.dev/skills/nowork-studio/notfair-plugin/sitemap-audit)
Your own site
<a href="https://agentmods.dev/skills/nowork-studio/notfair-plugin/sitemap-audit"><img src="https://agentmods.dev/badge/skills/nowork-studio/notfair-plugin/sitemap-audit/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for sitemap-audit

Your own site · 80×15
<a href="https://agentmods.dev/skills/nowork-studio/notfair-plugin/sitemap-audit"><img src="https://agentmods.dev/badge/skills/nowork-studio/notfair-plugin/sitemap-audit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 229 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,225 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00229 $0.01225
Opus 5 $0.00114 $0.00613
Sonnet 5 $0.00046 $0.00245
Haiku 4.5 $0.00023 $0.00122

Measured 9d ago against content hash 5c356f907b4e, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

sitemap-audit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

seo/sitemap-audit/SKILL.md · 118 lines

How it starts

The opening of the file, as written. The whole thing — 118 lines — stays where its author put it; the contents beside it link to each section on GitHub.

XML Sitemap Audit

You are a technical-SEO engineer. Your job is to make a site's XML sitemap a clean, trustworthy index of exactly the URLs Google should crawl and index — no more, no less — and to flag everything currently undermining that.

A sitemap full of redirects, 404s, and noindex URLs teaches Google to distrust it and wastes crawl budget. A sitemap missing important pages slows their discovery. Both are common; both are fixable.

Credit: capability inspired by the open-source claude-seo project (MIT, Agrici Daniel). Implementation is original to NotFair.


Step 0 — Scope

Collect the site URL ($SITE_URL). If the user gives a direct sitemap URL, use it; otherwise discover it in Phase 1.


Phase 0 — Preflight & data

Read and follow ../shared/preamble.md for script discovery and GSC auth.

If GSC is connected, pull the Sitemaps report and the Index coverage / Pages report. GSC tells you which sitemaps Google has, their last read status, any errors, and how many submitted URLs are actually indexed — the ground truth this audit reconciles against.


Phase 1 — Discover all sitemaps

  1. Fetch robots.txt and read every Sitemap: directive.
  2. Fetch /sitemap.xml, /sitemap_index.xml, and any CMS-specific defaults (WordPress/Rank Math: /sitemap_index.xml; Yoast similar).
  3. If it's a sitemap index, enumerate the child sitemaps and recurse.

Record the full tree: index → child sitemaps → URL counts. Note whether the sitemap is referenced from robots.txt (it should be).


Phase 2 — Structural validation

Check each sitemap file:

  • Valid XML, correct namespace, parses without errors.
  • Limits: ≤ 50,000 URLs and ≤ 50 MB uncompressed per file. Over either → must split into a sitemap index.
  • Absolute URLs, all on the same host/protocol as the sitemap, all HTTPS.
  • <lastmod> present and in valid W3C date format. Flag sitemaps where every lastmod is identical or set to "today" on every fetch — fake lastmod erodes trust and Google starts ignoring it.
  • <priority> / <changefreq> — note if present, but state plainly that Google largely ignores them (don't recommend effort there).

Read the full file on GitHub · 118 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 118 lines · 229 tokens per session scan A 5c356f907b4e

Subscribe to this mod's changes

sitemap-audit is a skill published in the GitHub repository nowork-studio/notfair-plugin (3,662 stars, last pushed 3d ago), licensed MIT. It adds 229 tokens to every session and 1,225 once invoked, about $0.0011 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

octowiz

Octowiz AI coding workflow coordinator. Reads IntegraHub memory doctrine at runtime, detects where you are in the development lifecycle, and routes to the right skill combination from superpowers + mattpocock-skills. Use this skill at the START of any development work — whether you have a fresh idea, an existing plan…

raelli/octowiz · 139 tokens

setup

Setup orchestrator for the Octowiz Bridge. Re-runs the live environment check, builds a gap list, and runs only the phases needed: plugins, memory, repo, verify. Invoked automatically by octowiz:octowiz when hard gaps are detected.

raelli/octowiz · 57 tokens

build-user-persona

Build evidence-backed user personas from research inputs. Creates structured persona documents grounded in evidence, with each attribute clearly labeled as research-validated or inferred. Use this skill when you need personas for an FR, strategy doc, or design brief. Trigger on: "build a persona", "create user…

felipecabargas/gambit · 105 tokens

competitive-analysis

Structure a competitive landscape analysis — player profiles, capability comparison matrix, whitespace opportunities, and strategic implications. Use this skill when entering a new market, refreshing strategy, or preparing for a planning cycle. Trigger on: "do a competitive analysis", "who are our competitors"…

felipecabargas/gambit · 100 tokens

write-feature-request

Guided Feature Request (FR) authoring. Assists the user in writing a high-quality FR by collecting structured inputs (problem, solution, outcomes, requirements), then auto-generates Acceptance Criteria for every requirement. If any AC cannot be written due to missing information, the skill identifies the gaps and…

felipecabargas/gambit · 150 tokens

write-product-strategy

Generate comprehensive product strategy documents aligned with business goals. Use this when defining or updating your product's strategic direction, aligning teams on where to play and how to win, or creating a STRATEGY.md that bridges vision and execution. Triggers include: clarifying product strategy, articulating…

felipecabargas/gambit · 120 tokens