Original Summary

I wanted a site audit that does not send the URL or the results to a third-party server, so I built one as a browser extension. Arg Architect opens the site in its own window, reloads it a few times under controlled conditions, and scores what the browser can actually observe: - Security: headers (CSP, HSTS, frame protection), cookies, exposed secrets, known-vulnerable client libraries - Performance: Core Web Vitals as the median of repeated loads, not one lucky run - Architecture: third-party dependencies, API origins, redirect chains, detected stack - Payload and efficiency: JS, CSS, image and font weight, caching, compression, duplicate requests - Accessibility and DOM: alt text, labels, headings, landmarks - AI readiness: robots.txt bot rules, llms.txt, structured data, agent discovery What I would not compromise on: - Nothing is uploaded. No account, no analytics. The vulnerability database and a small multilingual embedding model ship inside the extension. - Nothing runs on pages you browse normally. The collectors are only injected into the site being audited, only during the audit. - Missing evidence is reported as unknown, not as a failure. If the browser could not see a header, it does not count against the site. - Cookie banners are answered with "reject" or "essential-only," never accept. - Every failing check names what fails and suggests a fix. You can queue up to 10 URLs, compare two runs, and export to PDF, Markdown or JSON. Chrome: https://chromewebstore.google.com/detail/arg-architect/bijelgdokpgmffnddemjblgdocnbogid Firefox: https://addons.mozilla.org/addon/arg-architect/   submitted by   /u/FormalAd7608 [link]   [comments]

  • 情报分类：技术学习与提效
  • 分类依据：内容涉及技术、AI、软件工具或工程实践
  • 信息来源：Reddit · SideProject
  • 发布时间：2026/10/12 17:33:58