auditkit
Local hybrid CLI for agency website audits. Rust runs the core workflow: audit folders, quick HTML checks, security checks, and report generation. Node is used only for Lighthouse.
A command-line tool for freelancers and agencies that audits any website for SEO problems, missing security headers, and performance issues, then saves findings as readable markdown reports.
Audit Kit is a command-line tool for freelancers and agencies who need to audit client websites. You give it a URL, and it runs a set of automated checks covering HTML and SEO basics, security headers, and a performance analysis powered by Google's Lighthouse tool. The results are saved as readable markdown files in a folder of your choosing.
The core of the tool is written in Rust, which handles HTML fetching, audit logic, and report writing. Node.js is included only to run Lighthouse, which requires a browser (Chrome, Chromium, Brave, or Edge) to be installed on the same machine.
The simplest workflow is a single command, ak check, which prompts you for the site URL, runs the checks, and asks where to save the output. For client work, a fuller workflow is available: ak new creates a named workspace folder for the client, ak inspect runs all automated checks inside that workspace, and ak report generates a summary of findings along with a draft client email, all as markdown files organized in one directory.
Individual commands can also be run standalone. The security command checks HTTP response headers. The lighthouse command runs the Lighthouse performance and accessibility scan and saves both a markdown summary and the raw JSON output. Each command accepts a save flag so you can drop results wherever your workflow expects them. The tool installs via npm or Bun, and architecture notes for developers are kept in a separate docs file in the repository.
Where it fits
- Run a full website audit for a client and get SEO issues, security header gaps, and Lighthouse scores saved as markdown files with one command.
- Create a named workspace per client, run all checks inside it, and generate a summary report plus a draft follow-up email ready to send.
- Check a site's HTTP security response headers independently to spot missing headers before presenting findings to a client.