Mixed Content Audit Claude Skill
This skill audits an HTTPS website for mixed content and insecure resources, and produces an actionable report. It crawls pages and inspects every subresource to find active mixed content (http scripts, stylesheets, iframes, and objects browsers block on https pages), insecure form actions that submit over http, passive mixed content (http images, audio, and video), legacy protocol-relative (//) resource URLs, and pages still served over http. Mixed content breaks pages and strips the padlock; the skill finds every instance and groups it by root cause.
Quick Take
Point the skill at an https site root or URL list. It crawls pages, inventories every subresource, and returns a prioritized report of insecure resources grouped by root cause so an HTTPS migration can be finished cleanly.
What The Skill Checks
- Active mixed content: http scripts, stylesheets, iframes, and objects that browsers block on https pages, plus insecure form actions that submit over http.
- Passive mixed content: http images, audio, and video that strip the padlock and trigger the browser "Not secure" warning.
- Migration gaps: legacy protocol-relative (//) resource URLs and pages still served over http.
How The Skill Is Packaged
The skill follows the standard Claude Agent Skill structure: a SKILL.md file with YAML frontmatter and workflow instructions, a references/ folder with the full audit check definitions and report template, and a scripts/ folder with Python scripts that crawl the site and extract every subresource URL, then audit each one for insecure http and protocol-relative references. Install it with npx claude-seo-skills install mixed-content-audit, or copy the skill folder into your Claude skills directory; Claude invokes it automatically when a request matches its description.
Skill Files
Every file in the skill is embedded below directly from the Claude-SEO-Skills repository, so you can review exactly what the skill instructs Claude to do before installing it.
SKILL.md
The skill definition: frontmatter, inputs to collect, the workflow, and the resources the skill relies on.
Audit Checks Reference (references/audit-checks.md)
Full definitions, severities, and rationale for every check across the high, medium, and low tiers.
Report Template (references/report-template.md)
The output structure the skill follows, including the sections issues are grouped into.
Resource Extractor Script (scripts/extract_resources.py)
Crawls pages and inventories every subresource: scripts, styles, iframes, images, media, and form actions.
Resource Auditor Script (scripts/audit_resources.py)
Audits each subresource for insecure http and protocol-relative URLs, then outputs the structured report data grouped by root cause.