Releases

Fixed

• Hang on first run that would happen sometimes

Added

• Added squirrel skills install command for managing skills
• Added release permalink pages on website
• Installer now installs skills

Changed

• Increased maximum pages cap from 500 to 5,000

Added

• Added security/leaked-secrets security rule for detecting exposed credentials - rule docs
• Added security/form-captcha rule for form protection checks - rule docs
• Install now available on npm as squirrelscan

Changed

• CLI options now use kebab-case for consistency
• Agent use documentation

Added

• --bin-dir flag for CLI with shell-aware PATH instructions
• Markdown and LLM output formats for audit command

Fixed

• App formatting issues

Added

• WAF detection in crawler
• Display config and database paths on command execution

Changed

• Removed node-tls-client dependency from crawler

Fixed

• Project setup on init and config setting
• Updated quickstart configuration

Added

• Compact LLM output format for reports
• Skills updates with Makefile support

Changed

• Improvements and refactoring to core functionality
• Updated core audit-website skill

Fixed

• Graceful fallback to standard fetch when TLS client unavailable in compiled binary

Added

• File-based debug logging with configurable levels
• Browser impersonation (IMPIT) for WAF bypass
• Footer with issue link and feedback command in CLI
• New audit rules: orphan pages, dead-end pages, and indexability checks
• Robots.txt parsing and schema utilities
• Resource checks and redirect tracking
• Configurable thresholds for orphan page detection
• Configurable anchor link handling in dead-end page detection

Changed

• Auto-update now shows notifications only instead of auto-installing
• Overhauled output formats for reports
• Overhauled scoring system with curve-based calculations and penalties
• Unified parsing architecture to eliminate duplicate HTML parsing
• Renamed "domain" to "category" across the codebase
• Improved CLI validation and reachability checks
• Enhanced pattern matching with exact segments and regex support

Fixed

• Audits now always create new crawls instead of resuming incomplete ones
• TLS client improvements for better compatibility
• Restored missing indexability rules
• Improved report command error messages
• Corrected indexability API usage
• Improved audit scoring and schema robustness

Added

• Live progress display with gradient banner during audits
• Broken external link detection
• HTTP and client-side redirect following on seed URL
• Random browser user-agent rotation for more reliable crawling
• Page URLs shown for each issue in reports with grouped broken links
• Enhanced HTML report branding and page visibility indicators

Performance

• Breadth-first crawling with intelligent prefix-based throttling
• Eliminated redundant DOM parsing - significant speed improvement
• Optimized database queries to remove N+1 query patterns

Changed

• Rules can now be marked as disabled in schema instead of using --all flag

Fixed

• HTML report generation dependencies

Installation

curl -fsSL https://squirrelscan.com/install.sh | bash

Or download the binary for your platform below.