Website Spec

Overview

Self-contained offline version of The Website Specification — runs without network access, ideal for air-gapped environments, maximum-privacy workflows, and internal projects. Audits websites against 128 topics organized in 10 categories, each tagged required/recommended/optional/avoid with implementation guidance and verification steps.

When to Use

• “Audit my site” or “what’s missing”
• Security headers review
• Accessibility checks (WCAG)
• Agent readiness checklist (llms.txt, MCP, A2A)
• Performance audit (Core Web Vitals)
• Any site-quality question backed by WHATWG, W3C, IETF, and WCAG standards

Installation

npx skills add https://gitlab.com/fabriciotelles/skills -s website-spec

Categories (128 topics)

Category	Topics	Description
Foundations	14	HTML, head, and document basics
SEO	13	robots.txt, sitemaps, canonicals, structured data
Accessibility	20	WCAG-aligned rules for all abilities
Security	12	Headers, transport, and policies
Well-Known URIs	9	Standard paths under /.well-known/
Agent Readiness	18	Making sites legible to AI agents and crawlers
Performance	19	Core Web Vitals, caching, images, fonts
Privacy	6	Consent, signals, respecting visitor choice
Resilience	5	Error pages, offline, redirects
Internationalisation	12	Language, locale, direction, translated content

Workflows

• Full site audit — Complete audit with ✅/❌/⚠️ report
• Category-specific audit — Focused audit on one category
• Lookup a specific topic — Point query about a topic
• Re-audit and comparison — Compare between audits
• Generate implementation checklist — Task checklist

Output Format

# Website Spec Audit — {URL}
## Summary
- Required: n/total passing
- Recommended: n/total passing
- Score: percentage%

## Priority fixes (required, failing)
## Recommended improvements

Update (May 2026) — Full LGPD Compliance

The privacy section was rewritten for 100% compatibility with Brazil’s LGPD (Lei 13.709/2018):

• ANPD’s 2026 reorganization (Resolution 33) and Brazil-EU mutual adequacy decision (Resolution 32/2026)
• Mandatory SCCs (Resolution 19/2024), opt-in cookie consent model
• 15-day DSAR deadline, 3-business-day breach notification
• 10 legal bases, DPO/Encarregado requirements, children’s data (ECA Digital)
• AI/automated decisions (Art. 20)
• All 6 privacy reference files updated

Companion skill

For a focused LGPD-only audit, see the LGPD Check skill.

Origin

Based on the work of Joost de Valk and contributors. License CC-BY-4.0.

📄 Full documentation on GitLab