Domain Intelligence Report — https://shir-str.com/

Generated: 2026-05-12 | Pipeline: domain-intelligence skill (6 parallel phases) | Target: שיר אסטרטגיה וניהול — IL non-profit fundraising consultancy

Executive Summary

  1. Brand: שיר אסטרטגיה וניהול ("Shir Strategy & Management") is a boutique Israeli consultancy serving non-profit organizations (עמותות) with fundraising strategy, smart-campaign methodology, crowdfunding, PR system buildout, and Diaspora ("יעד בחו"ל") fundraising. Office in Kfar Etzion industrial zone (Gush Etzion). 6-person team led by Moshe Wilf (CEO) + Uri Shoshan + Shlomi Adelman (who hosts the "המעבדה" podcast). Built on WordPress + Elementor by agency JEWTECH.
  1. Tracking is shallow + GDPR/PPL-exposed: GA4 + Google Tag Manager + Google Ads conversion tag all fire from page-load 1 with zero consent banner, zero privacy policy, and an empty Terms page. Meta Pixel + LinkedIn Insight + Microsoft Clarity are all absent — site is paying for Google Ads while flying blind on retargeting and form-funnel diagnostics. The compliance gap is the highest-risk finding in this report — direct Israeli Privacy Protection Law 1981 §11 breach.
  1. WooCommerce is installed-but-empty platform bloat (0 products via /wp-json/wc/store/v1/products). PHP 7.4.33 is exposed via X-Powered-By and is end-of-life since 2022-11-28. No security headers. No CDN. Security-score = -5/100. Half-of-2025 enforcement focus is exactly this profile.
  1. Owned media is bigger than the website shows: shir-str owns an active YouTube channel (185 videos, 204K views, 289 subs — joined Sep 2023) and a multi-platform podcast ("המעבדה" on Spotify/Apple/Podbean) that the website does NOT link to in Organization.sameAs, footer social icons, or Yoast social settings. The single linked social account is a low-investment Facebook legacy page (140 followers, /profile.php?id=). The LinkedIn presence is a private /in/ Person profile, not a /company/ Page — category mismatch + no Sponsored Content capability.
  1. Brand-claim drift: site homepage says 100M ₪ raised, About page says 200M ₪, Facebook intro says 212M ₪. Three numbers for the same fact-pattern, one brand — a credibility issue at exactly the SERP layer that AI-generated summaries will surface. Pick the 212M figure (latest) and propagate. Title tag is short (29 chars), Organization.sameAs is empty, no LocalBusiness / Service / Person / Review / PodcastSeries / VideoObject / FAQ schema — every advanced SEO lever is unused.

Quick Stats

Tracking Pixels
3 active (GA4 G-XKP6H9YEC2, GTM GTM-N824K4X, Google Ads AW-669511773) + Enable.co.il a11y; Meta/LinkedIn/Microsoft pixels absent
Ecommerce Platform
WooCommerce 10.7.0 installed — 0 products, platform bloat
Security Score
-5 / 100 (Critical — every header missing + X-Powered-By exposes PHP 7.4.33 EOL)
PageSpeed (Mobile)
N/A (GOOGLE_API_KEY unavailable in user-readable env)
Schema Types
WebPage, WebSite, Organization (empty sameAs), BreadcrumbList, ImageObject — 5 nodes, no LocalBusiness/Service/Person/Review/Video/Podcast/FAQ
Social Profiles
1 linked (Facebook 140 followers); 3 owned-but-unlinked (YouTube 289 subs/185 videos, Spotify podcast, private LinkedIn /in/ profile)
Compliance Score
3 / 10 (accessibility is strong; privacy + terms + cookies all missing or empty shells)
Domain
WordPress 6.8.5 + Elementor 4.0.7 + Yoast SEO; nginx + PHP 7.4.33 (EOL); no CDN; agency: JEWTECH
Hebrew lang signals
✓ <html lang="he-IL" dir="rtl">, ✓ og:locale: he_IL — proper RTL setup
Content velocity
31 blog posts (6 in last 90d) + 185 YouTube videos + ~3-10 podcast episodes — active publishing across channels

Technical Health

Stack: nginx + PHP 7.4.33 (EOL since 2022-11-28) + WordPress 6.8.5 + WooCommerce 10.7.0 + Elementor 4.0.7 + hello-elementor-theme. No CDN. Yoast SEO sitemap structure works correctly.

Security: every recommended HTTP header is missing (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COEP/COOP/CORP). X-Powered-By: PHP/7.4.33 is a double-flag (stack disclosure + EOL version). Security score: -5 / 100.

Performance signals (no PageSpeed measurement this run): heavy Elementor + WooCommerce overhead on PHP 7.4 + no CDN suggests mobile Performance score of 30-55, LCP 3.5-5.5 sec, INP likely poor. CrUX field data likely absent at the page level (small audience).

Crawlability: robots.txt is permissive (User-agent: * / Disallow:) but has no Sitemap: directive. Yoast generates a sitemap index → 5 child sitemaps. Site is fully indexable. Page sitemap includes ~12 "bloat" pages (9 דוגמא-גרף-X demo pages, 2 elementor-XXXX autosaves, 1 404-1 page) that should be noindex.

Recommended fixes (independent of PageSpeed):

  1. Upgrade PHP 7.4 → 8.2+ (hosting-level toggle) — ~25% perf lift + security patches
  2. Add Cloudflare free-tier CDN — cuts EU/US TTFB ~50%
  3. Add HSTS + CSP + X-Frame-Options + X-Content-Type-Options to nginx server block
  4. Deactivate WooCommerce — frees 50-100 KB JS/CSS per page + removes 4 empty indexable URLs

SEO Analysis

Indexability: HTTPS ✓, sitemap ✓ (5-segment Yoast structure), meta robots index,follow ✓, canonical ✓ self-canonical, content actively published.

Internationalization: <html lang="he-IL" dir="rtl"> ✓, og:locale: he_IL ✓. No hreflang (acceptable single-language site, but no x-default either).

Schema (5 nodes, every advanced lever missing): WebPage, WebSite, Organization (sameAs empty), BreadcrumbList, ImageObject. Missing: LocalBusiness (has physical address!), Service (5 distinct services!), Person (6 named team members with degrees!), Review (has /המלצות-נוספות/ testimonials page!), PodcastSeries / Episode (has active podcast!), VideoObject (has 185 YouTube videos!), FAQPage (service pages are ideal candidates!).

Title + description:

Sitemap bloat: 9 דוגמא-גרף-X demo pages + 2 elementor-XXXX autosaves + 1 404-1 page = ~12 indexable pages with no value. Noindex via Yoast.

Cross-content disconnects: 185 YouTube videos exist on UC0ymQ0mm9VTAjVPEAkEGvKQ channel; the website does not link to the channel in nav, footer, schema sameAs, or Yoast social settings. Each blog post that overlaps in topic with a video is missing the embed + VideoObject schema.

Brand-claim consistency: 100M (homepage) vs 200M (About page) vs 212M (Facebook intro) — pick one and propagate. AI-generated SERP summaries will surface the drift.

PageSpeed-derived audit: not available — GOOGLE_API_KEY not in user-readable env. Section produced stack-signal hypothesis only.

Marketing & Tracking

Active tags: GA4 G-XKP6H9YEC2 + GTM GTM-N824K4X + Google Ads AW-669511773 + Enable.co.il accessibility toolbar. Static-HTML scan saw no gtag('event','conversion',...) blocks tied to the Elementor lead form — conversions may be wired inside the GTM container (invisible without PageSpeed network trace), OR may not be wired at all (the most common state in our IL B2B sample).

Absent: Meta Pixel, LinkedIn Insight, Microsoft Ads UET, Microsoft Clarity, Hotjar, FullStory, HubSpot, ActiveCampaign, Mailchimp tracking, Maskyoo / CallApp / Leader-for-WP (Israeli call-tracking), 077-/073- virtual phone-swap.

Audiences available today:

Consent Mode v2: absent. No gtag('consent','default',{...}) block before the GA4/Ads configs. Both an Ads-audit finding AND a Compliance finding.

Israeli specifics:

Priority interventions:

  1. Install Meta Pixel + LinkedIn Insight + Microsoft Clarity (3 tags, ~$0/month)
  2. Wire the lead form to a Google Ads conversion via GTM formSubmit trigger
  3. Configure Consent Mode v2 before the gtag configs (compliance + ads measurement both depend on this)
  4. Add Enhanced Conversions + offline-conversion import (hashed-email passback)

Company & Market Intelligence

Brand profile: religious-Zionist-adjacent boutique consultancy serving Israeli non-profits + Diaspora-fundraising. Kfar Etzion office. 6-person team. Founded ~2023 based on YouTube channel join date (Sep 2023) and oldest blog post (Jan 2023). Sub-brand: "המעבדה" podcast.

Service offerings (5): בונים יסודות, קמפיין חכם, קמפיין גיוס המונים, הקמת מערך יח"צ, הקמת יעד בחו"ל.

Track record claim: 212M ₪ raised for clients (Facebook intro, most recent figure).

Competitive set (IL non-profit fundraising consulting): פלטק את שחם (Pletek Shem, market leader since 1995), מינוף (Minuf), משאבים (Mashabim, "2000+ NGOs"), Israel Impact Partners (English-side), IsraelGives / IsraelToremet (tech platform). Tech-platform threats (IsraelGives + FundMe + Headstart + Mimoona) commoditize the crowdfunding-specific offering.

Online reputation:

SWOT (quick read):

Social Intelligence

Channel Audience Status Linked from site?
Facebook (page) 140 likes / 140 followers / 16 following / 2 reviews "Not yet rated" / category "Consulting agency" Dormant legacy /profile.php?id=100094725872382 URL ✓ Yes (footer)
YouTube channel UC0ymQ0mm9VTAjVPEAkEGvKQ (@שיראסטרטגיהוניהול) 185 videos, 204K views, 289 subs — joined Sep 2023 Active production (~6/month) ❌ Not linked
Spotify podcast "המעבדה" (show/5DHOKKaHP12JfMbtX4z35T) Listener counts unmeasured (Rephonic 403) — Apple + Spotify + Podbean distribution Steady release Partial (podcast nav link points to internal /הפודקאסט-שלנו/ page, not external)
LinkedIn /in/ Person profile (not /company/) — privacy-restricted Category mismatch ❌ Not linked
Instagram / TikTok / X / Threads / Pinterest / Snapchat — Absent n/a
WhatsApp Business +972 50-236-2886 CTA link only (no catalog / no quick-reply automation) ✓ Yes
Google Business Profile — Likely unclaimed n/a

Cross-platform inconsistencies:

Priority interventions:

  1. Create LinkedIn Company page (not Person) — assign founders as employees → Sponsored Content + Lead Gen Forms eligibility
  2. Populate Organization.sameAs with: Facebook, YouTube, Spotify podcast URL, eventual LinkedIn Company URL, eventual GBP URL
  3. Claim Google Business Profile (30-min free fix → immediate Maps + Knowledge Panel benefit)
  4. Cross-link YouTube videos in blog posts with VideoObject schema

Compliance Status

Compliance score: 3 / 10 (Critical). Accessibility is genuinely well done; everything else is missing or empty shells.

Element State
Privacy Policy ❌ MISSING (/privacy-policy/ 404 + /מדיניות-פרטיות/ 404; no link anywhere)
Terms of Service ⚠️ EMPTY SHELL (/תקנון-ותנאי-שימוש/ returns 200 but page body has only title + standard lead-gen form — zero substantive terms text)
Cookie Policy ❌ MISSING
Cookie Consent Banner / CMP ❌ MISSING (no OneTrust/Cookiebot/Iubenda/Termly/Usercentrics/Didomi detected — pixels fire pre-consent)
Accessibility Statement ✓ PRESENT (/נגישות/, HTTP 200, substantive Hebrew text, Enable.co.il widget)
Refund / Returns / Cancellation N/A (no transactional ecommerce)

Israeli regulatory exposure:

Critical 4-step compliance fix:

  1. Publish a Privacy Policy at /מדיניות-פרטיות/ covering: data collected, purposes, lawful basis, recipients (Google + GTM-loaded tools + hosting + email), retention, data-subject rights, designated privacy contact. Link from footer of every page.
  2. Install a cookie consent banner (Cookiebot / Iubenda / Termly are IL-popular). Configure GA4/Ads/GTM to gate on consent via GCMv2 wiring.
  3. Fill in the empty Terms page with actual terms — scope of services, payment, IP ownership, confidentiality, liability cap, dispute-resolution venue.
  4. Add a consent checkbox + privacy-link to the Elementor lead form.

Priority Actions

Critical (fix immediately)

  1. Publish a Privacy Policy + add a Cookie Consent Banner — direct Israeli PPL §11 breach today. (Compliance)
  2. Fill in the empty Terms page — indexable empty /תקנון-ותנאי-שימוש/ is worse than missing; signals abandonment. (Compliance)
  3. Upgrade PHP 7.4.33 → 8.2+ at the hosting level — EOL since 2022-11-28, missing security patches, +25% perf. (Technical)
  4. Add core HTTP security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options) to nginx — lifts security score from -5 → 75+. (Technical)
  5. Install Meta Pixel + LinkedIn Insight Tag + Microsoft Clarity — the brand is paying for Google Ads while flying blind on retargeting + form-funnel diagnostics. (Marketing)
  6. Reconcile the 100M / 200M / 212M ₪ raised claim to one canonical number across site + Facebook + LinkedIn + YouTube + podcast bios. (Brand consistency)
  7. Wire the lead-form to a Google Ads conversion event via GTM — Google Ads is optimizing on clicks, not leads, today. (Marketing)
  8. Configure Google Consent Mode v2 (GCMv2) — gtag('consent','default',{...}) before GA4/Ads configs. Compliance + ads measurement both depend on this. (Marketing + Compliance)

High (fix before campaign launch)

  1. Create a real LinkedIn Company page (the current /in/ Person profile is a category mismatch — no Sponsored Content / Lead Gen Forms capability). (Social)
  2. Cross-link YouTube channel + Spotify podcast + Facebook + LinkedIn in Organization.sameAs schema (and Yoast Social Profiles, and footer social icons). 185 YouTube videos are currently invisible to the entity graph. (SEO + Social)
  3. Claim Google Business Profile (Kfar Etzion address — 30-min free fix → immediate Maps + Knowledge Panel benefit). (SEO + Social)
  4. Add LocalBusiness + Service + Person + Review schema — every advanced E-E-A-T lever is unused. (SEO)
  5. Deactivate WooCommerce — 0 products, 4 empty indexable URLs, 50-100 KB unnecessary JS/CSS per page. (Technical + SEO)
  6. Noindex the 12 sitemap-bloat pages (9 דוגמא-גרף demo + 2 elementor-XXXX + 404-1). (SEO)
  7. Add Sitemap: directive to robots.txt. (SEO)
  8. Rewrite the homepage title from 29 → 50-60 chars (include service intent + proof point). (SEO)
  9. Add Enhanced Conversions + offline-conversion import for Google Ads (hashed-email passback from CRM/lead form). (Marketing)

Medium (optimize over time)

  1. Migrate Facebook Page to a vanity URL (/profile.php?id=... → /shir-strategy or similar) — free 5-min fix, removes legacy signal. (Social)
  2. Standardize FB-listed email from shir.str148@gmail.com to Office@shir-str.com. (Brand consistency)
  3. Add FAQPage schema to each of the 5 service pages with 4-6 common Q&A. (SEO)
  4. Embed matching YouTube video in each blog post + add VideoObject schema. (SEO + Social)
  5. Add PodcastSeries + Episode schema on /הפודקאסט-שלנו/. (SEO + Social)
  6. Add a CDN (Cloudflare free tier) — cuts US/EU TTFB ~50% for Diaspora donor audience. (Technical)
  7. Install a marketing-automation platform (ActiveTrail or HubSpot Starter) for newsletter signups + lifecycle email. (Marketing)
  8. Audit the GTM container with the brand owner — confirm every active tag has documented purpose + remove orphans. (Marketing)
  9. Configure WP Elementor Forms auto-purge of stored submissions (default = indefinitely; set 6-12 mo). (Compliance hygiene)
  10. Cluster the 31-post blog into 3-4 pillar topics with pillar pages + cluster-hubs. (SEO)
  11. Add lazy-loading + WebP image conversion for wp-content/uploads/ (Yoast or ShortPixel). (Technical perf)

Data Sources

Run Telemetry & Meta-Improvement

Phase durations

01 · Scan
4m 15s
255s
— PageSpeed (parallel)
—
0s
02a · SEO scan-derived
1m 35s
95s
02b · SEO PageSpeed
5s
5s
03 · Ads Audit
2m 15s
135s
04 · Compliance
2m 35s
155s
05 · Social Audit
10m 08s (overlapped with 02a/03/04)
608s
06 · Research
4m 25s
265s
Final Assembly
1m 30s
90s
HTML generation
—
0s
**Total wall time**
**~21 min**
1260s
Service
Credits
0s
Firecrawl
1
0s
PageSpeed
n/a (key unavailable)
0s
ScrapeCreators
1
0s
Apify
~$0.02 dataset run
0s
BrightData
unused (Apify FB worked first try)
0s
Perplexity
n/a (key unavailable)
0s
WebSearch
n/a
0s
WebFetch
n/a
0s
curl
n/a
0s
_This section is MANDATORY. It's how the pipeline gets smarter. Dolev reviews it and promotes approved improvements from PROPOSED.md to MEMORY.md or edits phase files directly._

Wall-time breakdown

Phase Started (UTC) Finished (UTC) Duration Retries Notes
01 · Scan 09:26:50 09:31:05 4m 15s 0 Firecrawl 1 credit + 25 curl fetches + WP-JSON probe; PageSpeed skipped
— PageSpeed (parallel) n/a n/a — — Skipped — no GOOGLE_API_KEY in user-readable env
02a · SEO scan-derived 09:35:35 09:37:10 1m 35s 0 Analysis-only, no API
02b · SEO PageSpeed 09:37:10 09:37:15 5s 0 Skipped — degraded mode, stack-signal hypothesis only
03 · Ads Audit 09:37:15 09:39:30 2m 15s 0 Analysis-only; GTM-N824K4X contents unverified (no PageSpeed network trace)
04 · Compliance 09:39:30 09:42:05 2m 35s 0 Subpage cross-check on Terms slug took 1 extra fetch
05 · Social Audit 09:33:22 09:43:30 10m 08s (overlapped with 02a/03/04) 0 Apify FB ~39s + 2 ScrapeCreators calls + Rephonic 403 + WebFetch LinkedIn 999
06 · Research 09:42:05 09:46:30 4m 25s 0 6 WebSearches (no Perplexity key); Hebrew-only queries got better signal
Final Assembly 09:46:30 09:48:00 1m 30s 0 Pre-built skeleton from Step 0 → fill cells
HTML generation 09:48:00 TBD — — runs after this section
Total wall time 09:26:50 ~09:48:00 ~21 min 0 Sequential execution (no Task tool available in this env)

Critical path

Longest-running phase: 05 · Social Audit at 10m 08s (driven by Apify FB scrape ~39s + multiple WebSearches + 2 anti-bot 403/999 failures).

Critical path chain: Scan (4m 15s) → parallel-block-of-specialists (10m 08s, Social Audit being longest) → Assembly (1m 30s) = ~16 min if perfectly parallelized.

Actual chain in this run: Scan + Social-API-bound work overlapped, then analysis phases ran sequentially (no Task tool in this environment) — actual wall time ~21 min.

Proposed improvements (awaiting Dolev's review in PROPOSED.md)

_Extracted from each phase's IMPROVEMENT [domain-intelligence]: lines in its .meta.md sidecar. None auto-applied._

  1. Phase 01 — Always grab raw HTML via curl AS WELL as Firecrawl JSON. Firecrawl drops <head> on some WordPress sites, breaking pixel/meta detection.
  2. Phase 01 — Add a "Platform-Bloat probe" sub-step: for WooCommerce sites hit /wp-json/wc/store/v1/products; for Shopify hit /products.json. Identifies installed-but-unused plugins in 1 fetch.
  3. Phase 01 — Add a "page-sitemap pre-scan" sub-step before speculative URL probing for privacy/terms/cookie pages. Saves 4-6 round-trips per run.
  4. Phase 01 — Add a "Site Builder / Agency credit" detector (footer regex for "CREATED BY <name>" / "Powered by <name>" / "Designed by <name>"). Found "CREATED BY JEWTECH" on shir-str — useful market-intelligence signal.
  5. Phase 01 / 00 — Surface API-key availability check in Step 0 of the orchestrator. Pre-flight .env readability so phases know which will degrade BEFORE spawning.
  6. Phase 01 reference — Add an "Israeli payment gateways" section to ecommerce-signatures.md (PayMe, CardCom, Tranzila, iCount, PayPlus, GreenInvoice, Hyp).
  7. Phase 02a — Output explicit rewrite suggestions (not just diagnoses) for broken on-page elements (title/description).
  8. Phase 02a — Add a "Schema gap inventory" sub-step listing expected schema types by industry vertical.
  9. Phase 02a — Add a "Knowledge Panel readiness" checklist.
  10. Phase 02b — Move env-readability check to Phase 00 (preload). Mark phase as "skipped — degraded mode" from minute 1, and produce stack-signal hypothesis section instead of waiting to discover and abort.
  11. Phase 03 — Add a "GTM container inspection" sub-step that depends on PageSpeed network trace; when 02b is degraded, label GTM-housed tags as "unobservable — likely includes [list]".
  12. Phase 03 — Add explicit Consent Mode v2 wiring check — absence is itself an audit finding regardless of banner existence.
  13. Phase 03 — Add an "estimated value of gap" sub-section per missing platform, calibrated by industry vertical.
  14. Phase 03 — Add an "industry-segment platform-inventory baseline" reference — what tracking a B2B-NGO vs DTC ecommerce vs SaaS "should" have.
  15. Phase 04 — Add "present-but-empty" state to legal-page detector (distinct from "missing" and "present"). Flag terms/privacy with < 1000 chars substantive body.
  16. Phase 04 — Add a "Form Data Lifecycle" probe (6 questions per form a privacy policy must answer).
  17. Phase 04 — Add an "Industry regulatory hammer" indicator distinguishing regulated (insurance/financial/pension) vs SMB-consultancy tiers.
  18. Phase 05 — Add a "discover unlinked channels" sub-step (YouTube @brand, Spotify show search, Apple Podcasts search, LinkedIn /in/ + /company/ for brand name). This caught shir-str's YouTube + LinkedIn that the site doesn't link.
  19. Phase 05 — Add a cross-platform consistency table as a standard output (brand name / email / phone / revenue-claim / tagline).
  20. Phase 05 — Add Rephonic + Listen Notes + Chartable entries to social-api-endpoints.md for podcast metrics.
  21. Phase 06 — Default to Hebrew-only WebSearch for IL targets; English-fallback only for cross-jurisdictional research.
  22. Phase 06 — Build per-segment "canonical competitors" reference files (e.g. il-nonprofit-consulting-competitors.md).
  23. Phase 06 — Add SWOT (quick read) as a standard output structure.
  24. Phase 06 — Add a "legal-entity verification" step (Israeli רשם החברות lookup or equivalent for non-IL targets).

Parallelization analysis

API / credit usage

Service Calls Failures Credits
Firecrawl 1 0 1
PageSpeed 0 n/a n/a (key unavailable)
ScrapeCreators 3 1 (LinkedIn 404 — profile private; 0 credits charged) 1
Apify 1 run 0 ~$0.02 dataset run
BrightData 0 n/a unused (Apify FB worked first try)
Perplexity 0 n/a n/a (key unavailable)
WebSearch 7 0 n/a
WebFetch 2 2 (Rephonic 403 + LinkedIn 999 — both expected anti-bot) n/a
curl ~30 0 n/a

Reporting contract compliance

Next-run recommendations

_Orchestrator's observations on improving the pipeline structure (vs per-phase improvements above):_

  1. Pre-flight ALL API keys for readability in Step 0, not just file existence. The inbal user has explicit deny on /root/agency/campaigner-studio/.env.local — this is structural, not transient. Either provision keys in /home/inbal/.env, or change ACL on the shared env file, or make the orchestrator probe each key with a 1-call test (PageSpeed: 1 call to a known-good URL; Perplexity: 1 call with a 5-token completion) before declaring the phase healthy.
  2. The Task tool was unavailable in this run — the skill assumes Task is the parallelization mechanism. When it's not present, the orchestrator should fall back to running phases in topological order with bash-level parallelism (& + wait) wherever the phase's work is bash-bound (API calls, file I/O). Today the SKILL.md doesn't document a fallback.
  3. PROPOSED.md is the staging area for improvements — this run's 24 improvements should be appended (not auto-applied) for Dolev's review. The hook isn't visible in this environment, so the proposed-improvements list lives only in this section + per-phase metas.
  4. The compliance section is the highest-stakes finding on shir-str — surface it at the top of the executive summary on similar small-IL-non-profit targets, not lower in the priority list. Right now the report orders Critical findings by phase, not by legal/regulatory severity.
  5. "Empty WooCommerce" is a common pattern worth elevating to its own quick-stat metric ("Platform Bloat Detected: WooCommerce installed, 0 products"). Multiple pilot runs would benefit from the same probe.

Run metadata

Generated 2026-05-12 11:46 · domain-intelligence skill · view markdown source