vigialisted
Install: claude install-skill luizporto-ai/vigia
# vigia, website auditor (diagnose, never fix)
vigia runs a battery of probes against a URL or a local build directory and returns
a prioritized report. Your job as the agent: **run it, read the JSON, and act on the
findings**, vigia itself only diagnoses.
## Run it
```bash
# Live URL
npx @luizporto/vigia https://example.com --json /tmp/vigia.json
# Local build (serves the dir in a headless browser)
npx @luizporto/vigia ./dist --json /tmp/vigia.json
# CI gate (exit 1 if any critical/high verdict fails)
npx @luizporto/vigia https://example.com --ci
# Scope to cheap probes (no browser needed)
npx @luizporto/vigia https://example.com --only headers,static,dns
```
Full browser/perf coverage needs Playwright + Lighthouse once:
`npm i -D playwright lighthouse @axe-core/playwright && npx playwright install`.
Without them, the render/perf probes **skip gracefully** (headers/static/dns still run).
## Read the JSON
`report.findings[]`, each finding:
| field | meaning |
|---|---|
| `type` | `verdict` = proven fact · `hypothesis` = can't be proven headless |
| `confidence` | `proven` · `heuristic` · `needs-device` |
| `status` | `fail` · `warn` · `pass` · `info` |
| `severity` | `critical` · `high` · `medium` · `low` · `info` |
| `evidence` | what vigia observed |
| `remediation` | how to fix it |
| `source` | authoritative reference URL |
`report.summary`, counts + `worstSeverity` + `ciPass` (false if any critical/high failed).
## How to act on findings (the intelligence)
1