site-watchdog

Monitors live sites for uptime, security-header drift, TLS expiry, and homepage defacement.

Updated Jun 9, 2026
One-click install
npx skills add https://github.com/timikalo7/Execute --skill site-watchdog-timikalo7
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: site-watchdog
Source: https://github.com/timikalo7/Execute/tree/main/.claude/skills/site-watchdog
Command: npx skills add https://github.com/timikalo7/Execute --skill site-watchdog-timikalo7

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Launched sites silently break: TLS certificates expire, hosts drop security headers after config changes, and bad deploys blank the homepage — all invisible until a visitor or attacker notices. This Skill turns those checks into a mechanical daily routine with automatic GitHub issue alerts. ## Core Features & Use Cases - Daily health checks: Verifies every configured route returns HTTP 200, the homepage contains an expected marker text, required security headers are present, and the TLS certificate has enough days before expiry. - Config-driven automation: Drop a watchdog.json into a project directory and a GitHub Actions cron picks it up daily at 07:00 UTC, opening or commenting on a GitHub issue when checks fail. - Three-verdict honesty: Distinguishes pass, site failure, and NOT CHECKED (when the runner itself has no network route), using a control host and IPv4/IPv6 retries so a blind monitor never reports a false outage. - Use Case: After launching a marketing site to production, add a watchdog.json with its URL, routes, and marker text; the next morning any cert, header, or uptime regression appears as a GitHub issue. ## Quick Start Ask the agent to run the site-watchdog check locally against your project's watchdog.json to verify the site's routes, headers, and certificate.

Frequently Asked Questions about site-watchdog

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I monitor a live website for uptime and security headers?

Create a watchdog.json in your project directory with the site URL, routes to check, expected homepage marker text, and required security headers. A GitHub Actions workflow runs the checks daily at 07:00 UTC and opens a GitHub issue on any failure.

How do I run the site health check locally?

Run node .claude/skills/site-watchdog/check.mjs with the --config flag pointing to your watchdog.json file. The script exits 0 on pass, 1 on site failure, and 3 when the machine itself cannot reach the internet, and it honors HTTPS_PROXY.

Why does a website monitor report a site down when it is actually up?

This happens when the monitoring runner has no network route to the target, such as missing IPv6 connectivity for an IPv6-only site. The watchdog solves this with a control host check: if the control is also unreachable, it reports NOT CHECKED instead of a false outage.

What checks does the watchdog fail on?

It fails when any configured route does not return HTTP 200, the homepage lacks the expected marker text, a required security header is missing, or the TLS certificate has fewer days left than minCertDays. Slow responses over 4 seconds only produce warnings.

Does the site watchdog require credentials or invasive access?

No. It checks only the public surface of the site using read-only GET and HEAD requests via curl and an openssl certificate inspection. No credentials, authentication, or invasive probing are involved.