Technical SEO Audit
Shared Data Cache
Step 0 -- Check shared data cache:
Before gathering, check .seo-cache/ for reusable context from related SEO skills.
Reference: ../seo/references/shared-data-cache.md for schemas and dependency map.
Check these cache files when present:
.seo-cache/site-meta.json for domain, business type, industry, and crawl context
.seo-cache/audit-scores.json for prior full-audit priorities
.seo-cache/pages/{url-slug}/page-analysis.json for page-level context when a URL is provided
If found: parse and use clearly valid fields (note "Using cached [X] from [date]")
If missing, corrupt, or irrelevant: continue with fresh evidence
If the user says "refresh" or "re-run": ignore cache reads and overwrite on write
Categories
1. Crawlability
- robots.txt: exists, valid, not blocking important resources
- XML sitemap: exists, referenced in robots.txt, valid format
- Noindex tags: intentional vs accidental
- Crawl depth: important pages within 3 clicks of homepage
- JavaScript rendering: check if critical content requires JS execution
- Crawl budget: for large sites (>10k pages), efficiency matters
AI Crawler Management
As of 2025-2026, AI companies actively crawl the web to train models and power AI search. Managing these crawlers via robots.txt is a critical technical SEO consideration.
Known AI crawlers:
| Crawler |
Company |
robots.txt token |
Purpose |
| GPTBot |
OpenAI |
GPTBot |
Model training |
| ChatGPT-User |
OpenAI |
ChatGPT-User |
Real-time browsing |
| ClaudeBot |
Anthropic |
ClaudeBot |
Model training |
| PerplexityBot |
Perplexity |
PerplexityBot |
Search index + training |
| Bytespider |
ByteDance |
Bytespider |
Model training |
| Google-Extended |
Google |
Google-Extended |
Gemini training (NOT search) |
| CCBot |
Common Crawl |
CCBot |
Open dataset |
Key distinctions:
- Blocking
Google-Extended prevents Gemini training use but does NOT affect Google Search indexing or AI Overviews (those use Googlebot)
- Blocking
GPTBot prevents OpenAI training but does NOT prevent ChatGPT from citing your content via browsing (ChatGPT-User)
- ~3-5% of websites now use AI-specific robots.txt rules
Example, selective AI crawler blocking:
# Allow search indexing, block AI training crawlers
User-agent: GPTBot
Disallow: /
User-agent: Google-Extended
Disallow: /
User-agent: Bytespider
Disallow: /
# Allow all other crawlers (including Googlebot for search)
User-agent: *
Allow: /
Recommendation: Consider your AI visibility strategy before blocking. Being cited by AI systems drives brand awareness and referral traffic. Cross-reference the seo-geo skill for full AI visibility optimization.
2. Indexability
- Canonical tags: self-referencing, no conflicts with noindex
- Duplicate content: near-duplicates, parameter URLs, www vs non-www
- Thin content: pages below minimum word counts per type
- Pagination: rel=next/prev or load-more pattern
- Hreflang: correct for multi-language/multi-region sites
- Index bloat: unnecessary pages consuming crawl budget
3. Security
- HTTPS: enforced, valid SSL certificate, no mixed content
- Security headers:
- Content-Security-Policy (CSP)
- Strict-Transport-Security (HSTS)
- X-Frame-Options
- X-Content-Type-Options
- Referrer-Policy
- HSTS preload: check preload list inclusion for high-security sites
4. URL Structure
- Clean URLs: descriptive, hyphenated, no query parameters for content
- Hierarchy: logical folder structure reflecting site architecture
- Redirects: no chains (max 1 hop), 301 for permanent moves
- URL length: flag >100 characters
- Trailing slashes: consistent usage
5. Mobile Optimization
- Responsive design: viewport meta tag, responsive CSS
- Touch targets: minimum 48x48px with 8px spacing
- Font size: minimum 16px base
- No horizontal scroll
- Mobile-first indexing: Google indexes mobile version. Mobile-first indexing is 100% complete as of July 5, 2024. Google now crawls and indexes ALL websites exclusively with the mobile Googlebot user-agent.
6. Core Web Vitals
- LCP (Largest Contentful Paint): target <2.5s
- INP (Interaction to Next Paint): target <200ms
- INP replaced FID on March 12, 2024. FID was fully removed from all Chrome tools (CrUX API, PageSpeed Insights, Lighthouse) on September 9, 2024. Do NOT reference FID anywhere.
- CLS (Cumulative Layout Shift): target <0.1
- Evaluation uses 75th percentile of real user data
- Use PageSpeed Insights API or CrUX data if MCP available
7. Structured Data
- Detection: JSON-LD (preferred), Microdata, RDFa
- Validation against Google's supported types
- See seo-schema skill for full analysis
8. JavaScript Rendering
- Check if content visible in initial HTML vs requires JS
- Identify client-side rendered (CSR) vs server-side rendered (SSR)
- Flag SPA frameworks (React, Vue, Angular) that may cause indexing issues
- Verify dynamic rendering setup if applicable
JavaScript SEO: Canonical & Indexing Guidance (December 2025)
Google updated its JavaScript SEO documentation in December 2025 with critical clarifications:
- Canonical conflicts: If a canonical tag in raw HTML differs from one injected by JavaScript, Google may use EITHER one. Ensure canonical tags are identical between server-rendered HTML and JS-rendered output.
- noindex with JavaScript: If raw HTML contains
<meta name="robots" content="noindex"> but JavaScript removes it, Google MAY still honor the noindex from raw HTML. Serve correct robots directives in the initial HTML response.
- Non-200 status codes: Google does NOT render JavaScript on pages returning non-200 HTTP status codes. Any content or meta tags injected via JS on error pages will be invisible to Googlebot.
- Structured data in JavaScript: Product, Article, and other structured data injected via JS may face delayed processing. For time-sensitive structured data (especially e-commerce Product markup), include it in the initial server-rendered HTML.
Best practice: Serve critical SEO elements (canonical, meta robots, structured data, title, meta description) in the initial server-rendered HTML rather than relying on JavaScript injection.
9. IndexNow Protocol
- Check if site supports IndexNow for Bing, Yandex, Naver
- Supported by search engines other than Google
- Recommend implementation for faster indexing on non-Google engines
Output
Technical Score: XX/100
Category Breakdown
| Category |
Status |
Score |
| Crawlability |
pass/warn/fail |
XX/100 |
| Indexability |
pass/warn/fail |
XX/100 |
| Security |
pass/warn/fail |
XX/100 |
| URL Structure |
pass/warn/fail |
XX/100 |
| Mobile |
pass/warn/fail |
XX/100 |
| Core Web Vitals |
pass/warn/fail |
XX/100 |
| Structured Data |
pass/warn/fail |
XX/100 |
| JS Rendering |
pass/warn/fail |
XX/100 |
| IndexNow |
pass/warn/fail |
XX/100 |
Critical Issues (fix immediately)
High Priority (fix within 1 week)
Medium Priority (fix within 1 month)
Low Priority (backlog)
DataForSEO Integration (Optional)
If DataForSEO MCP tools are available, use on_page_instant_pages for real page analysis (status codes, page timing, broken links, on-page checks), on_page_lighthouse for Lighthouse audits (performance, accessibility, SEO scores), and domain_analytics_technologies_domain_technologies for technology stack detection.
Google API Integration (Optional)
If Google API credentials are configured, use python scripts/pagespeed_check.py <url> --json for real PSI + CrUX field data (replaces lab-only CWV estimates), python scripts/crux_history.py <url> --json for 25-week CWV trends, and python scripts/gsc_inspect.py <url> --json for real indexation status per URL.
Error Handling
| Scenario |
Action |
| URL unreachable |
Report connection error with status code. Suggest verifying URL, checking DNS resolution, and confirming the site is publicly accessible. |
| robots.txt not found |
Note that no robots.txt was detected at the root domain. Recommend creating one with appropriate directives. Continue audit on remaining categories. |
| HTTPS not configured |
Flag as a critical issue. Report whether HTTP is served without redirect, mixed content exists, or SSL certificate is missing/expired. |
| Core Web Vitals data unavailable |
Note that CrUX data is not available (common for low-traffic sites). Suggest using Lighthouse lab data as a proxy and recommend increasing traffic before re-testing. |
Write to shared data cache
After completing all work, write a concise JSON summary to .seo-cache/ when the workflow produced durable findings.
Use the schemas and naming rules in ../seo/references/shared-data-cache.md; include at least cache_type, analyzed_at, source URL/domain, key findings, issues, recommendations, and tool limitations. Add .seo-cache/ to .gitignore if it is missing.
1---2name: seo-technical-23description: Technical SEO audit across 9 categories: crawlability, indexability, security, URL structure, mobile, Core Web Vitals, structured data, JavaScript rendering, and IndexNow protocol. Use when user says "technical SEO", "crawl issues", "robots.txt", "Core Web Vitals", "site speed", or "security headers".4license: MIT5---67# Technical SEO Audit8## Shared Data Cache910**Step 0 -- Check shared data cache:**1112Before gathering, check `.seo-cache/` for reusable context from related SEO skills.13Reference: `../seo/references/shared-data-cache.md` for schemas and dependency map.1415Check these cache files when present:16- `.seo-cache/site-meta.json` for domain, business type, industry, and crawl context17- `.seo-cache/audit-scores.json` for prior full-audit priorities18- `.seo-cache/pages/{url-slug}/page-analysis.json` for page-level context when a URL is provided1920- If found: parse and use clearly valid fields (note "Using cached [X] from [date]")21- If missing, corrupt, or irrelevant: continue with fresh evidence22- If the user says "refresh" or "re-run": ignore cache reads and overwrite on write2324## Categories2526### 1. Crawlability27- robots.txt: exists, valid, not blocking important resources28- XML sitemap: exists, referenced in robots.txt, valid format29- Noindex tags: intentional vs accidental30- Crawl depth: important pages within 3 clicks of homepage31- JavaScript rendering: check if critical content requires JS execution32- Crawl budget: for large sites (>10k pages), efficiency matters3334#### AI Crawler Management3536As of 2025-2026, AI companies actively crawl the web to train models and power AI search. Managing these crawlers via robots.txt is a critical technical SEO consideration.3738**Known AI crawlers:**3940| Crawler | Company | robots.txt token | Purpose |41|---------|---------|-----------------|---------|42| GPTBot | OpenAI | `GPTBot` | Model training |43| ChatGPT-User | OpenAI | `ChatGPT-User` | Real-time browsing |44| ClaudeBot | Anthropic | `ClaudeBot` | Model training |45| PerplexityBot | Perplexity | `PerplexityBot` | Search index + training |46| Bytespider | ByteDance | `Bytespider` | Model training |47| Google-Extended | Google | `Google-Extended` | Gemini training (NOT search) |48| CCBot | Common Crawl | `CCBot` | Open dataset |4950**Key distinctions:**51- Blocking `Google-Extended` prevents Gemini training use but does NOT affect Google Search indexing or AI Overviews (those use `Googlebot`)52- Blocking `GPTBot` prevents OpenAI training but does NOT prevent ChatGPT from citing your content via browsing (`ChatGPT-User`)53- ~3-5% of websites now use AI-specific robots.txt rules5455**Example, selective AI crawler blocking:**56```57# Allow search indexing, block AI training crawlers58User-agent: GPTBot59Disallow: /6061User-agent: Google-Extended62Disallow: /6364User-agent: Bytespider65Disallow: /6667# Allow all other crawlers (including Googlebot for search)68User-agent: *69Allow: /70```7172**Recommendation:** Consider your AI visibility strategy before blocking. Being cited by AI systems drives brand awareness and referral traffic. Cross-reference the `seo-geo` skill for full AI visibility optimization.7374### 2. Indexability75- Canonical tags: self-referencing, no conflicts with noindex76- Duplicate content: near-duplicates, parameter URLs, www vs non-www77- Thin content: pages below minimum word counts per type78- Pagination: rel=next/prev or load-more pattern79- Hreflang: correct for multi-language/multi-region sites80- Index bloat: unnecessary pages consuming crawl budget8182### 3. Security83- HTTPS: enforced, valid SSL certificate, no mixed content84- Security headers:85 - Content-Security-Policy (CSP)86 - Strict-Transport-Security (HSTS)87 - X-Frame-Options88 - X-Content-Type-Options89 - Referrer-Policy90- HSTS preload: check preload list inclusion for high-security sites9192### 4. URL Structure93- Clean URLs: descriptive, hyphenated, no query parameters for content94- Hierarchy: logical folder structure reflecting site architecture95- Redirects: no chains (max 1 hop), 301 for permanent moves96- URL length: flag >100 characters97- Trailing slashes: consistent usage9899### 5. Mobile Optimization100- Responsive design: viewport meta tag, responsive CSS101- Touch targets: minimum 48x48px with 8px spacing102- Font size: minimum 16px base103- No horizontal scroll104- Mobile-first indexing: Google indexes mobile version. **Mobile-first indexing is 100% complete as of July 5, 2024.** Google now crawls and indexes ALL websites exclusively with the mobile Googlebot user-agent.105106### 6. Core Web Vitals107- **LCP** (Largest Contentful Paint): target <2.5s108- **INP** (Interaction to Next Paint): target <200ms109 - INP replaced FID on March 12, 2024. FID was fully removed from all Chrome tools (CrUX API, PageSpeed Insights, Lighthouse) on September 9, 2024. Do NOT reference FID anywhere.110- **CLS** (Cumulative Layout Shift): target <0.1111- Evaluation uses 75th percentile of real user data112- Use PageSpeed Insights API or CrUX data if MCP available113114### 7. Structured Data115- Detection: JSON-LD (preferred), Microdata, RDFa116- Validation against Google's supported types117- See seo-schema skill for full analysis118119### 8. JavaScript Rendering120- Check if content visible in initial HTML vs requires JS121- Identify client-side rendered (CSR) vs server-side rendered (SSR)122- Flag SPA frameworks (React, Vue, Angular) that may cause indexing issues123- Verify dynamic rendering setup if applicable124125#### JavaScript SEO: Canonical & Indexing Guidance (December 2025)126127Google updated its JavaScript SEO documentation in December 2025 with critical clarifications:1281291. **Canonical conflicts:** If a canonical tag in raw HTML differs from one injected by JavaScript, Google may use EITHER one. Ensure canonical tags are identical between server-rendered HTML and JS-rendered output.1302. **noindex with JavaScript:** If raw HTML contains `<meta name="robots" content="noindex">` but JavaScript removes it, Google MAY still honor the noindex from raw HTML. Serve correct robots directives in the initial HTML response.1313. **Non-200 status codes:** Google does NOT render JavaScript on pages returning non-200 HTTP status codes. Any content or meta tags injected via JS on error pages will be invisible to Googlebot.1324. **Structured data in JavaScript:** Product, Article, and other structured data injected via JS may face delayed processing. For time-sensitive structured data (especially e-commerce Product markup), include it in the initial server-rendered HTML.133134**Best practice:** Serve critical SEO elements (canonical, meta robots, structured data, title, meta description) in the initial server-rendered HTML rather than relying on JavaScript injection.135136### 9. IndexNow Protocol137- Check if site supports IndexNow for Bing, Yandex, Naver138- Supported by search engines other than Google139- Recommend implementation for faster indexing on non-Google engines140141## Output142143### Technical Score: XX/100144145### Category Breakdown146| Category | Status | Score |147|----------|--------|-------|148| Crawlability | pass/warn/fail | XX/100 |149| Indexability | pass/warn/fail | XX/100 |150| Security | pass/warn/fail | XX/100 |151| URL Structure | pass/warn/fail | XX/100 |152| Mobile | pass/warn/fail | XX/100 |153| Core Web Vitals | pass/warn/fail | XX/100 |154| Structured Data | pass/warn/fail | XX/100 |155| JS Rendering | pass/warn/fail | XX/100 |156| IndexNow | pass/warn/fail | XX/100 |157158### Critical Issues (fix immediately)159### High Priority (fix within 1 week)160### Medium Priority (fix within 1 month)161### Low Priority (backlog)162163## DataForSEO Integration (Optional)164165If DataForSEO MCP tools are available, use `on_page_instant_pages` for real page analysis (status codes, page timing, broken links, on-page checks), `on_page_lighthouse` for Lighthouse audits (performance, accessibility, SEO scores), and `domain_analytics_technologies_domain_technologies` for technology stack detection.166167## Google API Integration (Optional)168169If Google API credentials are configured, use `python scripts/pagespeed_check.py <url> --json` for real PSI + CrUX field data (replaces lab-only CWV estimates), `python scripts/crux_history.py <url> --json` for 25-week CWV trends, and `python scripts/gsc_inspect.py <url> --json` for real indexation status per URL.170171## Error Handling172173| Scenario | Action |174|----------|--------|175| URL unreachable | Report connection error with status code. Suggest verifying URL, checking DNS resolution, and confirming the site is publicly accessible. |176| robots.txt not found | Note that no robots.txt was detected at the root domain. Recommend creating one with appropriate directives. Continue audit on remaining categories. |177| HTTPS not configured | Flag as a critical issue. Report whether HTTP is served without redirect, mixed content exists, or SSL certificate is missing/expired. |178| Core Web Vitals data unavailable | Note that CrUX data is not available (common for low-traffic sites). Suggest using Lighthouse lab data as a proxy and recommend increasing traffic before re-testing. |179180## Write to shared data cache181182After completing all work, write a concise JSON summary to `.seo-cache/` when the workflow produced durable findings.183Use the schemas and naming rules in `../seo/references/shared-data-cache.md`; include at least `cache_type`, `analyzed_at`, source URL/domain, key findings, issues, recommendations, and tool limitations. Add `.seo-cache/` to `.gitignore` if it is missing.