Website Replication Agent
Paste the following prompt into your AI chat to install this skill:
Please install @user_d3c0857a/replication-agent following https://skillhub.cn/install/skillhub.md.
About this skill
Problem It Solves
When replicating a front-end site or building a static mirror, the hard part is not just “downloading HTML.” Pages may rely on JavaScript rendering, CSS/fonts/images may be cross-origin, links may still point back to the source host, and missing assets can look fine locally but break after deployment. Replication Agent turns this into a reviewable workflow: confirm authorization first, then crawl, render, download assets, rewrite links, and generate quality reports before allowing local preview or static deployment.
How It Works
- Authorization gate: before running a mirror, it requires confirmation that the user owns the target site or has explicit permission. If authorization is unclear, it stops and waits for confirmation. It refuses to copy private areas, bypass paywalls/authentication, clone login/payment flows, or impersonate another brand.
- Crawl, render, and rewrite:
scripts/replication_agent.pyhandlescrawl,render,download assets, andrewrite links, then generates reports. - Quality signals: inspect
quality_report.json,crawl_table.json, andresource_table.jsonto checkready_for_release, page success rate, whether CSS/JS/image/font/video/document assets remain remote or missing, and whether internal links still point to the source host. - Preview and deployment:
scripts/serve_replica.pypreviews the aggregated localhost output;scripts/deploy_static_mirror.pycan upload generated static output and Nginx config over SSH. Deployment happens only when quality checks pass and the user explicitly requests it. - Configuration and checklist:
configs/replication_agent.example.jsonprovides a minimal template;references/usage.mdandreferences/release-checklist.mdcontain command examples, configuration details, and release checks.
Boundaries
This skill fits authorized site mirroring, internal previews, and static backups. It is not for scraping unauthorized content, bypassing login/paywall flows, copying brand assets, or building impersonation pages. Treat quality_report.json as the release gate: do not recommend public deployment if assets remain remote, console errors block rendering, same-domain 404s appear, or success rate is below threshold. For incremental updates, omit --force-refresh, but the core order remains authorization first, replication second, and acceptance last.
Use Cases
- After site authorization, capture the live pages into a local static replica and check missing assets.
- While replicating JS-rendered pages, record page success rate and remote CSS/JS/image issues.
- Before launch, verify internal links, same-domain 404s, and console errors in the quality report.
- Deploy the preview-passed static output and Nginx config over SSH to a static server.
Best For
- Front-end engineers who need an auditable static backup of an authorized site.
- Product engineers preparing offline page copies for review and checking asset completeness.
- Ops engineers validating links, resources, and console errors before release.
- DevOps engineers deploying static mirrors and Nginx configs to servers.
Related Skills
An engineer-focused HTTP request smuggling handbook covering CL.TE, TE.CL, TE.TE obfuscation, HTTP/2 downgrade, and client-side desync detection.
Analyzes network captures from Wireshark, tcpdump, Fiddler, and Charles, then pinpoints TCP, HTTP, DNS, and TLS issues with filter expressions and remediation steps.
Lightweight Python Linux HIDS exposing SSH brute-force, web attack, and webshell alerts via MCP with ban controls.
Detects AI-generated images from Stable Diffusion, Midjourney, and GPT-4o via Tencent Cloud image moderation and returns risk scores.