Export Report
OVERALL SCORE
Level 3, Bot-Aware
- AI Discoverability 75 out of 100
- Agent Ease of Use 51 out of 100
- Security & Trust 50 out of 100
- GEO, AIO and AEO 69 out of 100
- SEO 92 out of 100
- Performance and Accessibility 81 out of 100
What AI sees of your website
Mailtrap: Modern Email Delivery for dev and product teams
Modern Email Delivery Platform for developer & product teams. Fast delivery. High inboxing rates. 24/7 expert support. Email API/SMTP for reliable email sending
Next step
Turn this report into a fix workflow
11 failed checks are ready to move into MCP or CLI remediation. Generate a repair prompt, connect the scanner to your coding agent, or open the integration docs before your next rescan.
| Metric | Score | Status | Passed | Failed | Warning | Evidence |
|---|---|---|---|---|---|---|
| AI Discoverability | 75 | Mostly ready | 35 | 6 | 8 | View details |
| Discoverability | 100 | Strong | 10 | 0 | 0 | |
| Content Readiness | 71 | Needs work | 22 | 5 | 6 | View details |
| Bot Access Control | 58 | Needs work | 3 | 1 | 2 | View details |
| Agent Ease of Use | 51 | Needs work | 10 | 3 | 14 | View details |
| API | 77 | Mostly ready | 7 | 0 | 3 | |
| Auth | 48 | Priority fix | 1 | 1 | 2 | View details |
| MCP | 25 | Priority fix | 0 | 1 | 2 | View details |
| Skill Discovery | 52 | Needs work | 2 | 1 | 7 | View details |
| GEO, AIO and AEO | 69 | Needs work | 10 | 2 | 6 | View details |
| GEO Readiness | 61 | Needs work | 3 | 1 | 2 | View details |
| AIO Readiness | 88 | Mostly ready | 4 | 0 | 2 | |
| AEO Readiness | 59 | Needs work | 3 | 1 | 2 | View details |
| SEO | 92 | Strong | 9 | 1 | 0 | View details |
| SEO | 92 | Strong | 9 | 1 | 0 | View details |
| Security & Trust | 50 | Needs work | 9 | 5 | 4 | View details |
| Security & Trust | 50 | Needs work | 9 | 5 | 4 | View details |
| Performance and Accessibility | 81 | Mostly ready | 20 | 4 | 2 | View details |
| Performance | 78 | Mostly ready | 17 | 3 | 2 | View details |
| Accessibility | 87 | Mostly ready | 3 | 1 | 0 | View details |
Prioritized recommendations
Issues ranked by score impact
39 items need attention
Agent Ease of UseMCPEmerging recommendation
MCP Server Card
MCP Server Card failed at "Discover MCP server card".
50 Fail
Agent Ease of UseMCPEmerging recommendation
MCP Server Card
MCP Server Card failed at "Discover MCP server card".
Needs attention
MCP Server Card
Issue
This site claims MCP support or links to MCP metadata, but no MCP server card could be fetched.
Why it matters
MCP server cards give agents a stable, public pre-connection discovery surface for server identity, remote transports, protocol compatibility, and safe routing without guessing endpoints.
Check name
MCP Server Card
Score
0/100
Status
fail
Category
MCP
Maturity
Emerging recommendation
Goal
Publish an MCP Server Card that helps agents discover remote MCP server transports before opening a session.
Result
MCP Server Card failed at "Discover MCP server card".
Validation steps
Discover MCP server card
This site claims MCP support or links to MCP metadata, but no MCP server card could be fetched.
Evidence log1 step · 14 lines
Discover MCP server card [fail]! This site claims MCP support or links to MCP metadata, but no MCP server card could be fetched.INFODiscover MCP server card candidateCount=5INFOBuild MCP server-card candidate list currentPath="/.well-known/mcp-server-card" transitionalPaths=["/.well-known/mcp/server-card.json","/.well-known/mcp/server-cards.json","/mcp.json","/.well-known/mcp.json"] linkedPaths=[]WARNCheck whether page claims MCP support actual=true expected="true only when HTML or Link headers mention MCP" textMatches=["mcp"] headerLinkCount=0INFOTrying to fetch /.well-known/mcp-server-card url="https://mailtrap.io/.well-known/mcp-server-card" source="current"FAIL/.well-known/mcp-server-card did not return a usable server card statusCode=404 contentType="text/html; charset=UTF-8"INFOTrying to fetch /.well-known/mcp/server-card.json url="https://mailtrap.io/.well-known/mcp/server-card.json" source="transitional"FAIL/.well-known/mcp/server-card.json did not return a usable server card statusCode=404 contentType="text/html; charset=UTF-8"INFOTrying to fetch /.well-known/mcp/server-cards.json url="https://mailtrap.io/.well-known/mcp/server-cards.json" source="transitional"FAIL/.well-known/mcp/server-cards.json did not return a usable server card statusCode=404 contentType="text/html; charset=UTF-8"INFOTrying to fetch /mcp.json url="https://mailtrap.io/mcp.json" source="transitional"FAIL/mcp.json did not return a usable server card statusCode=404 contentType="text/html; charset=UTF-8"INFOTrying to fetch /.well-known/mcp.json url="https://mailtrap.io/.well-known/mcp.json" source="transitional"FAIL/.well-known/mcp.json did not return a usable server card statusCode=404 contentType="text/html; charset=UTF-8"FAILNo MCP server-card candidate was fetched successfully reason="This site claims MCP support or links to MCP metadata, but no MCP server card could be fetched."Agent Ease of UseMCPEmerging recommendation
WebMCP
WebMCP has a validation warning at "Probe WebMCP operability".
25 Warning
Agent Ease of UseMCPEmerging recommendation
WebMCP
WebMCP has a validation warning at "Probe WebMCP operability".
Needs attention
WebMCP
Issue
No WebMCP surface was found to probe.
Details
Why it matters
WebMCP gives agents structured page and browser tool hints so they can understand actions without relying only on screen scraping.
Check name
WebMCP
Score
50/100
Status
warning
Category
MCP
Maturity
Emerging recommendation
Goal
Expose browser/page WebMCP tools and compatible static WebMCP metadata when a site wants agents to understand in-page actions.
Result
WebMCP has a validation warning at "Probe WebMCP operability".
Validation steps
Detect WebMCP runtime API
Expose current WebMCP tools through document.modelContext.registerTool(), or clearly document navigator.modelContext as a compatibility/polyfill profile.
Probe WebMCP operability
No WebMCP surface was found to probe.
WebMCP operability findings
- No WebMCP surface was found to probe.
- Conventional WebMCP manifest paths were checked but did not return a valid manifest.
Validate declarative WebMCP form tools
No W3C-style declarative WebMCP form attributes were found.
Validate MCP-aware HTML annotations
No data-mcp-tool or hyphenated WebMCP compatibility annotations were found.
Validate static WebMCP JSON compatibility
No static WebMCP JSON manifest or WMCP interaction graph was found.
Validate WebMCP tool metadata quality
Use clear tool names, useful descriptions, constrained schemas, side-effect clarity, and profile-appropriate naming.
Review WebMCP security and policy signals
Remove secrets and prompt-injection text from WebMCP metadata, avoid private endpoints, and use Permissions-Policy and annotations for tool safety.
Evidence log7 steps · 32 lines
Detect WebMCP runtime API [informational]INFODetect WebMCP runtime API status="informational"INFOProbe rendered browser for WebMCP runtime objects SKIPCheck current W3C runtime API actual="not detected" expected="document.modelContext/registerTool available"INFOWebMCP evidence was recorded for context. status="informational"Probe WebMCP operability [warning]! No WebMCP surface was found to probe.INFOProbe WebMCP operability status="warning"INFORun safe WebMCP operability checks safeProbeOnly=trueWARNCheck usable WebMCP evidence actual=0 expected="at least 1 usable runtime, declarative, annotation, or static manifest signal"WARNWebMCP operability warning warning="No WebMCP surface was found to probe."WARNWebMCP operability warning warning="Conventional WebMCP manifest paths were checked but did not return a valid manifest."WARNNo WebMCP surface was found to probe.Validate declarative WebMCP form tools [informational]! No W3C-style declarative WebMCP form attributes were found.INFOValidate declarative WebMCP form tools status="informational"INFOInspect visible forms and controls for current declarative WebMCP attributes annotatedElements=0 formsWithAttributes=0 controlsWithAttributes=0SKIPValidate declarative WebMCP attribute quality actual=0 expected=0INFONo W3C-style declarative WebMCP form attributes were found. status="informational"Validate MCP-aware HTML annotations [informational]! No data-mcp-tool or hyphenated WebMCP compatibility annotations were found.INFOValidate MCP-aware HTML annotations status="informational"INFOInspect HTML for MCP compatibility annotations compatibilityAttributeCount=0 dataMcpToolCount=0 examples=[]SKIPValidate compatibility annotation quality actual=0 expected=0INFONo data-mcp-tool or hyphenated WebMCP compatibility annotations were found. status="informational"Validate static WebMCP JSON compatibility [warning]! No static WebMCP JSON manifest or WMCP interaction graph was found.INFOValidate static WebMCP JSON compatibility status="warning"INFODiscover static WebMCP manifest candidates conventionalPaths=["/.well-known/webmcp.json","/webmcp.json"] checkedCount=2 profileCounts={}INFOWebMCP manifest candidate checked source="path" path="/.well-known/webmcp.json" url="https://mailtrap.io/.well-known/webmcp.json" statusCode=404 contentType="text/html; charset=UTF-8"INFOWebMCP manifest candidate checked source="path" path="/webmcp.json" url="https://mailtrap.io/webmcp.json" statusCode=404 contentType="text/html; charset=UTF-8"WARNValidate discovered static WebMCP metadata actual={"validManifestCount":0,"invalidManifestCount":0,"toolCount":0,"wmcpActionCount":0} expected="at least 1 valid tools[] manifest or WMCP graph when static metadata is present"WARNNo static WebMCP JSON manifest or WMCP interaction graph was found.Validate WebMCP tool metadata quality [informational]INFOValidate WebMCP tool metadata quality status="informational"INFOInspect WebMCP tool names, descriptions, schemas, and safety hints toolCount=0SKIPCheck tool metadata findings actual={"issueCount":0,"warningCount":0} expected="0 issues and 0 warnings"INFOWebMCP evidence was recorded for context. status="informational"Review WebMCP security and policy signals [informational]INFOReview WebMCP security and policy signals status="informational"INFOInspect WebMCP security and policy signals permissionsPolicy="(missing)" failureCount=0 warningCount=0PASSCheck security findings actual={"failures":0,"warnings":0} expected="0 failures and 0 warnings"INFOWebMCP evidence was recorded for context. status="informational"
AI DiscoverabilityBot Access ControlEstablished
AI bot rules in robots.txt
AI bot rules in robots.txt failed at "Classify AI crawler rules".
23 Fail
AI DiscoverabilityBot Access ControlEstablished
AI bot rules in robots.txt
AI bot rules in robots.txt failed at "Classify AI crawler rules".
Needs attention
AI bot rules in robots.txt
Issue
No explicit User-agent rules were found for major AI crawler tokens.
Why it matters
AI crawler product tokens have different meanings. Explicit robots.txt groups make training, search, and retrieval access policy auditable for compliant crawler operators.
Check name
AI bot rules in robots.txt
Score
31/100
Status
fail
Category
Bot Access Control
Maturity
Established
Goal
Declare deliberate robots.txt rules for major AI training, AI search, user-triggered, and dataset crawlers.
Result
AI bot rules in robots.txt failed at "Classify AI crawler rules".
Validation steps
Classify AI crawler rules
No explicit User-agent rules were found for major AI crawler tokens.
Evidence log1 step · 6 lines
Classify AI crawler rules [fail]! No explicit User-agent rules were found for major AI crawler tokens.INFOClassify AI crawler rulesINFOParsing User-agent groups and Allow/Disallow records for known AI crawler tokens evaluatedPath="/"INFOEvaluating exact User-agent matches before wildcard fallback exactAiPolicyCount=0 totalCrawlerTokens=18FAILNo explicit AI crawler User-agent groups were found examplesExpected=["GPTBot","OAI-SearchBot","ClaudeBot","Google-Extended","CCBot"]FAILCompare explicit AI crawler coverage actual=0 expected="> 0 explicit non-search AI crawler policies" missingTokens=["GPTBot","OAI-SearchBot","ChatGPT-User","ClaudeBot","Claude-SearchBot","Claude-User","Google-Extended","Applebot-Extended","Amazonbot","Amzn-SearchBot","Amzn-User","PerplexityBot"]INFOResolved effective root-path policy for crawler tokens blocked=0 allowed=21 unspecified=0Agent Ease of UseAuthEstablished
OAuth / OIDC discovery
OAuth / OIDC discovery failed at "Fetch discovery metadata".
19 Fail
Agent Ease of UseAuthEstablished
OAuth / OIDC discovery
OAuth / OIDC discovery failed at "Fetch discovery metadata".
Needs attention
OAuth / OIDC discovery
Issue
OAuth/OIDC was claimed or referenced, but no registered OAuth/OIDC discovery document was found.
Why it matters
OAuth and OIDC discovery let agents and API clients find authorization, token, and key endpoints programmatically instead of scraping login pages or guessing provider setup.
Check name
OAuth / OIDC discovery
Score
43/100
Status
fail
Category
Auth
Maturity
Established
Goal
Publish OAuth/OIDC discovery metadata only when the site operates or advertises a real OAuth/OIDC authorization server.
Result
OAuth / OIDC discovery failed at "Fetch discovery metadata".
Validation steps
Fetch discovery metadata
OAuth/OIDC was claimed or referenced, but no registered OAuth/OIDC discovery document was found.
Evidence log1 step · 6 lines
Fetch discovery metadata [fail]! OAuth/OIDC was claimed or referenced, but no registered OAuth/OIDC discovery document was found.INFOFetch discovery metadataINFOTrying OAuth/OIDC well-known metadata candidates checkedCount=2INFOChecked discovery candidate path="/.well-known/openid-configuration" statusCode=404 contentType="text/html; charset=UTF-8" length=1446INFOChecked discovery candidate path="/.well-known/oauth-authorization-server" statusCode=404 contentType="text/html; charset=UTF-8" length=1446FAILCheck discovery metadata fetch succeeded actual=2 expected="HTTP 2xx JSON metadata document"FAILFetch discovery metadata failed issue="OAuth/OIDC was claimed or referenced, but no registered OAuth/OIDC discovery document was found."AI DiscoverabilityContent ReadinessEstablished
Author attribution
Author attribution is partially implemented.
19 Warning
AI DiscoverabilityContent ReadinessEstablished
Author attribution
Author attribution is partially implemented.
Needs attention
Author attribution
Issue
No named author or publisher identity could be extracted.
Why it matters
Author attribution helps agents cite content responsibly, assess source credibility, and distinguish editorial pages from anonymous marketing copy.
Check name
Author attribution
Score
25/100
Status
warning
Category
Content Readiness
Maturity
Established
Goal
Identify content authors or publishers for trust and attribution.
Result
Author attribution is partially implemented.
Validation steps
Schema.org attribution
Schema.org attribution is incomplete or relies only on publisher/fallback evidence.
Author identity quality
No named author or publisher identity could be extracted.
Visible byline parity
Structured author/publisher names were not found in visible byline text.
HTML attribution support
No supporting HTML author metadata, rel=author link, or visible byline was found.
Evidence log4 steps · 16 lines
Schema.org attribution [warning]! Schema.org attribution is incomplete or relies only on publisher/fallback evidence.INFOSchema.org attributionINFOChecking structured data for author, creator, and publisher contributorsWARNCheck named Schema.org author count actual=0 expected="> 0" authorCount=0 publisherCount=1 namedContributors=0 authors=[] publishers=[{"role":"publisher","id":"https://mailtrap.io/#organization","sameAs":[],"format":"json-ld","mergedName":false}] formats=["json-ld"]WARNSchema.org attribution is incomplete or fallback-only authorCount=0 publisherCount=1 authors=[] publishers=[{"role":"publisher","id":"https://mailtrap.io/#organization","sameAs":[],"format":"json-ld","mergedName":false}]Author identity quality [fail]! No named author or publisher identity could be extracted.INFOAuthor identity qualityINFOChecking contributors for stable identity signalsFAILCheck identified contributor count actual=0 expected="> 0" namedContributors=0 identifiedContributors=[] unidentifiedContributors=[{"role":"publisher","id":"https://mailtrap.io/#organization","sameAs":[],"format":"json-ld","mergedName":false}]FAILNo named contributor identity could be extractedVisible byline parity [fail]! Structured author/publisher names were not found in visible byline text.INFOVisible byline parityINFOComparing structured contributor names with visible byline evidenceFAILCheck visible attribution matches actual=0 expected="> 0 or visible byline present" visibleByline=false bylineCount=0FAILNo visible byline parity foundHTML attribution support [warning]! No supporting HTML author metadata, rel=author link, or visible byline was found.INFOHTML attribution supportINFOChecking meta author, rel=author, and visible byline supportWARNCheck HTML attribution support signals actual=0 expected="> 0" metaAuthor=false relAuthor=false visibleByline=falseWARNNo supporting HTML attribution signal found
Agent Ease of UseAuthEmerging recommendation
Auth.md Agent Registration
Auth.md Agent Registration has a validation warning at "Warn when auth surface lacks Auth.md".
17 Warning
Agent Ease of UseAuthEmerging recommendation
Auth.md Agent Registration
Auth.md Agent Registration has a validation warning at "Warn when auth surface lacks Auth.md".
Needs attention
Auth.md Agent Registration
Issue
The site appears to support login, signup, account access, or credentials but does not publish /auth.md.
Why it matters
Human login and signup flows are often opaque to agents. Auth.md gives automated clients a stable registration contract instead of forcing them to scrape docs, automate browser forms, or guess credential flows.
Check name
Auth.md Agent Registration
Score
50/100
Status
warning
Category
Auth
Maturity
Emerging recommendation
Goal
Publish Auth.md v1 metadata so agents can discover how to register, claim a user, and obtain credentials.
Result
Auth.md Agent Registration has a validation warning at "Warn when auth surface lacks Auth.md".
Validation steps
Warn when auth surface lacks Auth.md
The site appears to support login, signup, account access, or credentials but does not publish /auth.md.
Evidence log1 step · 2 lines
Warn when auth surface lacks Auth.md [warning]! The site appears to support login, signup, account access, or credentials but does not publish /auth.md.INFOWarn when auth surface lacks Auth.mdWARNThe site appears to support login, signup, account access, or credentials but does not publish /auth.md.Agent Ease of UseAuthEmerging recommendation
OAuth Protected Resource
OAuth Protected Resource has a validation warning at "Detect protected-resource applicability".
17 Warning
Agent Ease of UseAuthEmerging recommendation
OAuth Protected Resource
OAuth Protected Resource has a validation warning at "Detect protected-resource applicability".
Needs attention
OAuth Protected Resource
Issue
Generic authentication signals were found, but no OAuth Protected Resource metadata signal was detected.
Why it matters
Protected-resource metadata tells agents which API/resource is locked, which authorization servers can issue tokens for it, and how a 401 challenge maps back to the correct resource.
Check name
OAuth Protected Resource
Score
50/100
Status
warning
Category
Auth
Maturity
Emerging recommendation
Goal
Publish OAuth Protected Resource Metadata for OAuth-protected APIs and MCP resources so clients can identify the resource and its authorization servers.
Result
OAuth Protected Resource has a validation warning at "Detect protected-resource applicability".
Validation steps
Detect protected-resource applicability
Generic authentication signals were found, but no OAuth Protected Resource metadata signal was detected.
Evidence log1 step · 4 lines
Detect protected-resource applicability [warning]! Generic authentication signals were found, but no OAuth Protected Resource metadata signal was detected.INFODetect protected-resource applicabilityINFOInspecting auth headers, MCP/OAuth claims, and protected-resource hints applies=false requiresAuthorizationServers=false signalsCount=0 genericAuthSignalsCount=3 checkedCount=1WARNCheck protected-resource metadata applicability actual=false expected="true when RFC 9728 metadata exists or support is claimed" checked=[{"url":"https://mailtrap.io/.well-known/oauth-protected-resource","path":"/.well-known/oauth-protected-resource","source":"root-well-known","resourceIdentifier":"https://mailtrap.io","statusCode":404,"contentType":"text/html; charset=UTF-8","length":1446}]WARNDetect protected-resource applicability completed with warnings issue="Generic authentication signals were found, but no OAuth Protected Resource metadata signal was detected."AI DiscoverabilityBot Access ControlEmerging recommendation
RSL license signal
No RSL declarations were found.
17 Warning
AI DiscoverabilityBot Access ControlEmerging recommendation
RSL license signal
No RSL declarations were found.
Needs attention
RSL license signal
Issue
No RSL declarations were found.
Why it matters
Really Simple Licensing is an emerging rights-expression layer for communicating content usage and licensing terms separately from robots.txt crawl permission.
Check name
RSL license signal
Score
50/100
Status
warning
Category
Bot Access Control
Maturity
Emerging recommendation
Goal
Declare machine-readable content licensing terms for compliant AI and crawler systems when the site needs them.
Result
No RSL declarations were found.
Validation steps
Discover RSL declarations
No RSL declarations were found.
Evidence log1 step · 4 lines
Discover RSL declarations [warning]! No RSL declarations were found.INFODiscover RSL declarationsINFOChecking robots.txt License records, HTTP Link rel=license headers, HTML license links, and inline RSL XML robotsFound=trueSKIPCount discovered RSL declarations actual=0 expected=">= 1 when RSL licensing terms are published" sources={}WARNNo RSL declarations were found on any supported discovery surface.AI DiscoverabilityBot Access ControlEmerging recommendation
TDMRep declaration
No TDMRep declaration was found.
17 Warning
AI DiscoverabilityBot Access ControlEmerging recommendation
TDMRep declaration
No TDMRep declaration was found.
Needs attention
TDMRep declaration
Issue
No TDMRep declaration was found at /.well-known/tdmrep.json.
Why it matters
TDMRep is a W3C Community Group protocol and IANA-registered well-known URI for declaring text and data mining reservation policy on applicable content.
Check name
TDMRep declaration
Score
50/100
Status
warning
Category
Bot Access Control
Maturity
Emerging recommendation
Goal
Publish a machine-readable text and data mining reservation declaration and verifiable ODRL policy when the site needs one.
Result
No TDMRep declaration was found.
Validation steps
Fetch /.well-known/tdmrep.json
No TDMRep declaration was found at /.well-known/tdmrep.json.
Evidence log1 step · 4 lines
Fetch /.well-known/tdmrep.json [warning]! No TDMRep declaration was found at /.well-known/tdmrep.json.INFOFetch /.well-known/tdmrep.jsonINFORequesting origin-level TDMRep declaration at /.well-known/tdmrep.jsonWARNCompare TDMRep file response actual=404 expected="2xx with JSON array when origin-level TDMRep is published" contentType="text/html; charset=UTF-8" length=1446WARNNo TDMRep declaration was found at /.well-known/tdmrep.json. Agent Ease of UseAPIEstablished
OpenAPI discovery
OpenAPI discovery has a validation warning at "Discover OpenAPI document".
17 Warning
Agent Ease of UseAPIEstablished
OpenAPI discovery
OpenAPI discovery has a validation warning at "Discover OpenAPI document".
Needs attention
OpenAPI discovery
Issue
The site appears to publish or document a public API, but no OpenAPI or Swagger document was found.
Why it matters
OpenAPI documents let agents understand operations, schemas, authentication, servers, and request/response formats before calling an API.
Check name
OpenAPI discovery
Score
67/100
Status
warning
Category
API
Maturity
Established
Goal
Publish a valid OpenAPI or Swagger document for public API discovery when this origin exposes public APIs.
Result
OpenAPI discovery has a validation warning at "Discover OpenAPI document".
Validation steps
Discover OpenAPI document
The site appears to publish or document a public API, but no OpenAPI or Swagger document was found.
Evidence log1 step · 16 lines
Discover OpenAPI document [warning]! The site appears to publish or document a public API, but no OpenAPI or Swagger document was found.INFODiscover OpenAPI document status="warning"INFOBuild OpenAPI candidate list conventionalPaths=19 candidateCount=19 sources={"conventional-path":19}INFOFetch OpenAPI candidate path="/openapi.json" source="conventional-path" statusCode=404 contentType="text/html; charset=UTF-8"INFOFetch OpenAPI candidate path="/openapi.yaml" source="conventional-path" statusCode=404 contentType="text/html; charset=UTF-8"INFOFetch OpenAPI candidate path="/swagger.json" source="conventional-path" statusCode=404 contentType="text/html; charset=UTF-8"INFOFetch OpenAPI candidate path="/swagger.yaml" source="conventional-path" statusCode=404 contentType="text/html; charset=UTF-8"INFOFetch OpenAPI candidate path="/api/openapi.json" source="conventional-path" statusCode=404 contentType="application/json; charset=utf-8"INFOFetch OpenAPI candidate path="/api/openapi.yaml" source="conventional-path" statusCode=404 contentType="application/json; charset=utf-8"INFOFetch OpenAPI candidate path="/api/swagger.json" source="conventional-path" statusCode=404 contentType="application/json; charset=utf-8"INFOFetch OpenAPI candidate path="/api/swagger.yaml" source="conventional-path" statusCode=404 contentType="application/json; charset=utf-8"INFOFetch OpenAPI candidate path="/docs/openapi.json" source="conventional-path" statusCode=404 contentType="text/html; charset=UTF-8"INFOFetch OpenAPI candidate path="/docs/openapi.yaml" source="conventional-path" statusCode=404 contentType="text/html; charset=UTF-8"INFOFetch OpenAPI candidate path="/api-docs" source="conventional-path" statusCode=404 contentType="text/html; charset=UTF-8"INFOFetch OpenAPI candidate path="/v3/api-docs" source="conventional-path" statusCode=404 contentType="text/html; charset=UTF-8"WARNSelect a usable OpenAPI candidate actual="none" expected="same-origin candidate with a parseable OpenAPI or Swagger document"WARNThe site appears to publish or document a public API, but no OpenAPI or Swagger document was found.Security & TrustSecurity & TrustEstablished
Referrer-Policy
Referrer-Policy failed at "Find Referrer-Policy header".
13 Fail
Security & TrustSecurity & TrustEstablished
Referrer-Policy
Referrer-Policy failed at "Find Referrer-Policy header".
Needs attention
Referrer-Policy
Issue
Referrer-Policy header is missing.
Why it matters
Referrer-Policy controls how much URL context is sent to other origins, limiting accidental leakage of paths, queries, and identifiers.
Check name
Referrer-Policy
Score
33/100
Status
fail
Category
Security & Trust
Maturity
Established
Goal
Limit how much referrer data leaves the site with an explicit Referrer-Policy header.
Result
Referrer-Policy failed at "Find Referrer-Policy header".
Validation steps
Find Referrer-Policy header
Referrer-Policy header is missing.
Review observed browser responses
One or more same-origin HTML documents observed by Chrome did not emit Referrer-Policy.
Evidence log2 steps · 8 lines
Find Referrer-Policy header [fail]! Referrer-Policy header is missing.INFOFind Referrer-Policy headerINFORead Referrer-Policy delivery header="referrer-policy" value="missing" metaReferrerPolicyCount=0 browserDefault="strict-origin-when-cross-origin"FAILRequire explicit HTTP Referrer-Policy header actual="missing" expected="HTTP response header present" issue="Referrer-Policy header is missing."FAILReferrer-Policy header is missing.Review observed browser responses [warning]! One or more same-origin HTML documents observed by Chrome did not emit Referrer-Policy.INFOReview observed browser responsesINFOSample Chrome-observed same-origin responses observedResponseCount=31 sameOriginCount=30 htmlDocumentCount=1WARNCompare observed Referrer-Policy coverage actual={"missingPolicyCount":1,"unsafeOrInvalidPolicyCount":0,"weakPolicyCount":0,"affected":[{"url":"https://mailtrap.io/","status":200,"resourceType":"document","contentType":"text/html; charset=UTF-8","referrerPolicy":null,"classification":"invalid"}]} expected="0 missing, unsafe, invalid, or weak same-origin HTML responses" issue="One or more same-origin HTML documents observed by Chrome did not emit Referrer-Policy."WARNOne or more same-origin HTML documents observed by Chrome did not emit Referrer-Policy.
Agent Ease of UseSkill DiscoveryEmerging recommendation
A2A Agent Card
A2A Agent Card has a validation warning at "Discover A2A Agent Card".
13 Warning
Agent Ease of UseSkill DiscoveryEmerging recommendation
A2A Agent Card
A2A Agent Card has a validation warning at "Discover A2A Agent Card".
Needs attention
A2A Agent Card
Issue
No A2A Agent Card was found at the current, legacy, or fallback discovery paths.
Why it matters
A2A Agent Cards provide protocol-specific discovery for agent identity, skills, input and output modes, transport bindings, capabilities, and security requirements. Legacy A2A also used /.well-known/agent.json, so scanners must classify the card shape before reporting readiness.
Check name
A2A Agent Card
Score
50/100
Status
warning
Category
Skill Discovery
Maturity
Emerging recommendation
Goal
Publish a version-appropriate A2A Agent Card so A2A-compatible clients can discover agent skills and invoke the declared endpoint safely.
Result
A2A Agent Card has a validation warning at "Discover A2A Agent Card".
Validation steps
Discover A2A Agent Card
No A2A Agent Card was found at the current, legacy, or fallback discovery paths.
Evidence log1 step · 8 lines
Discover A2A Agent Card [warning]! No A2A Agent Card was found at the current, legacy, or fallback discovery paths.INFODiscover A2A Agent CardINFOTry A2A discovery paths in priority order paths=["/.well-known/agent-card.json","/.well-known/agent.json","/agent-card.json","/.well-known/a2a/agent-card.json"]WARNA2A candidate path did not return a usable card path="/.well-known/agent-card.json" statusCode=404 contentType="text/html; charset=UTF-8"WARNA2A candidate path did not return a usable card path="/.well-known/agent.json" statusCode=404 contentType="text/html; charset=UTF-8"WARNA2A candidate path did not return a usable card path="/agent-card.json" statusCode=404 contentType="text/html; charset=UTF-8"WARNA2A candidate path did not return a usable card path="/.well-known/a2a/agent-card.json" statusCode=404 contentType="text/html; charset=UTF-8"WARNNo A2A Agent Card candidate was selectedWARNNo A2A Agent Card was found at the current, legacy, or fallback discovery paths.Agent Ease of UseSkill DiscoveryEmerging recommendation
agents.json
agents.json has a validation warning at "Discover agents.json".
13 Warning
Agent Ease of UseSkill DiscoveryEmerging recommendation
agents.json
agents.json has a validation warning at "Discover agents.json".
Needs attention
agents.json
Issue
No Wildcard-style agents.json file was found.
Why it matters
Wildcard agents.json gives agents workflow-level context beyond plain OpenAPI, including flows, links, examples, and API action structure. It is an emerging OpenAPI-adjacent proposal, so scanners should validate the contract shape without treating it as an A2A or IETF standard.
Check name
agents.json
Score
50/100
Status
warning
Category
Skill Discovery
Maturity
Emerging recommendation
Goal
Publish a Wildcard-style agents.json file so agents can discover OpenAPI-backed workflows, links, examples, and authentication requirements.
Result
agents.json has a validation warning at "Discover agents.json".
Validation steps
Discover agents.json
No Wildcard-style agents.json file was found.
Evidence log1 step · 6 lines
Discover agents.json [warning]! No Wildcard-style agents.json file was found.INFODiscover agents.jsonINFOTry agents.json discovery paths in priority order paths=["/.well-known/agents.json","/agents.json"]WARNagents.json candidate path did not return a usable contract path="/.well-known/agents.json" statusCode=404 contentType="text/html; charset=UTF-8"WARNagents.json candidate path did not return a usable contract path="/agents.json" statusCode=404 contentType="text/html; charset=UTF-8"WARNNo agents.json candidate was selectedWARNNo Wildcard-style agents.json file was found.Agent Ease of UseSkill DiscoveryEmerging recommendation
DNS-AID Agent Discovery
DNS-AID Agent Discovery has a validation warning at "Query DNS-AID records".
13 Warning
Agent Ease of UseSkill DiscoveryEmerging recommendation
DNS-AID Agent Discovery
DNS-AID Agent Discovery has a validation warning at "Query DNS-AID records".
Needs attention
DNS-AID Agent Discovery
Issue
No DNS-AID HTTPS/SVCB records were found under _agents.
Why it matters
DNS-AID lets agents discover index, A2A, and other agent entrypoints before fetching HTTP metadata. HTTPS/SVCB records provide the service-binding substrate, while DNSSEC can authenticate the discovery answer when available.
Check name
DNS-AID Agent Discovery
Score
50/100
Status
warning
Category
Skill Discovery
Maturity
Emerging recommendation
Goal
Publish DNS-AID HTTPS/SVCB records under _agents for DNS-based agent entrypoint discovery.
Result
DNS-AID Agent Discovery has a validation warning at "Query DNS-AID records".
Validation steps
Query DNS-AID records
No DNS-AID HTTPS/SVCB records were found under _agents.
Check DNSSEC authentication evidence
DNSSEC authentication evidence was not visible for the DNS-AID labels or hostname.
Evidence log2 steps · 23 lines
Query DNS-AID records [warning]! No DNS-AID HTTPS/SVCB records were found under _agents.INFOQuery DNS-AID recordsINFOBuild DNS-AID query names from hostname hostname="mailtrap.io" labels=["_index._agents.mailtrap.io","_a2a._agents.mailtrap.io"] claimedOnPage=falseWARNDNS query returned no DNS-AID answers name="_index._agents.mailtrap.io" rrtype="HTTPS" resolver="cloudflare-doh-json" rcode=3 ad=false answerCount=0WARNDNS query returned no DNS-AID answers name="_index._agents.mailtrap.io" rrtype="SVCB" resolver="cloudflare-doh-json" rcode=3 ad=false answerCount=0WARNDNS query returned no DNS-AID answers name="_index._agents.mailtrap.io" rrtype="ANY" resolver="node-resolveAny-fallback" answerCount=0 error="queryAny ETIMEOUT _index._agents.mailtrap.io"WARNDNS query returned no DNS-AID answers name="_a2a._agents.mailtrap.io" rrtype="HTTPS" resolver="cloudflare-doh-json" rcode=3 ad=false answerCount=0WARNDNS query returned no DNS-AID answers name="_a2a._agents.mailtrap.io" rrtype="SVCB" resolver="cloudflare-doh-json" rcode=3 ad=false answerCount=0WARNDNS query returned no DNS-AID answers name="_a2a._agents.mailtrap.io" rrtype="ANY" resolver="node-resolveAny-fallback" answerCount=0 error="queryAny ETIMEOUT _a2a._agents.mailtrap.io"WARNCompare total DNS-AID answer count actual=0 expected="> 0"WARNNo DNS-AID HTTPS/SVCB records were found under _agents.Check DNSSEC authentication evidence [warning]! DNSSEC authentication evidence was not visible for the DNS-AID labels or hostname.INFOCheck DNSSEC authentication evidenceWARNCompare DNSSEC authenticated-data flag actual=false expected=trueWARNCompare visible DNSSEC material actual=false expected=trueWARNResolver did not confirm authenticated DNSSEC data name="_index._agents.mailtrap.io" rrtype="HTTPS" resolver="cloudflare-doh-json" ad=false dnssecTypes=[]WARNResolver did not confirm authenticated DNSSEC data name="_index._agents.mailtrap.io" rrtype="SVCB" resolver="cloudflare-doh-json" ad=false dnssecTypes=[]WARNResolver did not confirm authenticated DNSSEC data name="_index._agents.mailtrap.io" rrtype="ANY" resolver="node-resolveAny-fallback" dnssecTypes=[]WARNResolver did not confirm authenticated DNSSEC data name="_a2a._agents.mailtrap.io" rrtype="HTTPS" resolver="cloudflare-doh-json" ad=false dnssecTypes=[]WARNResolver did not confirm authenticated DNSSEC data name="_a2a._agents.mailtrap.io" rrtype="SVCB" resolver="cloudflare-doh-json" ad=false dnssecTypes=[]WARNResolver did not confirm authenticated DNSSEC data name="_a2a._agents.mailtrap.io" rrtype="ANY" resolver="node-resolveAny-fallback" dnssecTypes=[]WARNResolver did not confirm authenticated DNSSEC data name="_index._agents.mailtrap.io" rrtype="DNSKEY" resolver="cloudflare-doh-json" ad=false dnssecTypes=[]WARNResolver did not confirm authenticated DNSSEC data name="_a2a._agents.mailtrap.io" rrtype="DNSKEY" resolver="cloudflare-doh-json" ad=false dnssecTypes=[]WARNResolver did not confirm authenticated DNSSEC data name="mailtrap.io" rrtype="DNSKEY" resolver="cloudflare-doh-json" ad=false dnssecTypes=[]WARNDNSSEC authentication evidence was not visible for the DNS-AID labels or hostname.
Security & TrustSecurity & TrustEstablished
Content-Security-Policy
Content-Security-Policy failed at "Find enforcing CSP delivery".
12 Fail
Security & TrustSecurity & TrustEstablished
Content-Security-Policy
Content-Security-Policy failed at "Find enforcing CSP delivery".
Needs attention
Content-Security-Policy
Issue
Applicable HTML response is missing an enforcing Content-Security-Policy header.
Why it matters
Content Security Policy reduces the impact of injection bugs by limiting where scripts, styles, frames, forms, and other browser resources can load or execute.
Check name
Content-Security-Policy
Score
40/100
Status
fail
Category
Security & Trust
Maturity
Established
Goal
Constrain browser resource loading and script execution with an enforcing Content-Security-Policy header.
Result
Content-Security-Policy failed at "Find enforcing CSP delivery".
Validation steps
Find enforcing CSP delivery
Applicable HTML response is missing an enforcing Content-Security-Policy header.
Evidence log1 step · 4 lines
Find enforcing CSP delivery [fail]! Applicable HTML response is missing an enforcing Content-Security-Policy header.INFOFind enforcing CSP deliveryINFORead CSP delivery headers enforcingHeader="missing" reportOnlyHeader="missing" metaPolicyCount=0 legacyHeadersPresent=[]FAILRequire enforcing Content-Security-Policy header actual="missing" expected="present" issue="Applicable HTML response is missing an enforcing Content-Security-Policy header."FAILApplicable HTML response is missing an enforcing Content-Security-Policy header.Security & TrustSecurity & TrustEstablished
Frame protection
Frame protection failed at "Validate X-Frame-Options".
11 Fail
Security & TrustSecurity & TrustEstablished
Frame protection
Frame protection failed at "Validate X-Frame-Options".
Needs attention
Frame protection
Issue
No valid X-Frame-Options fallback is present.
Why it matters
Frame protection blocks hostile sites from embedding pages in deceptive frames, reducing clickjacking and UI redressing risk.
Check name
Frame protection
Score
44/100
Status
fail
Category
Security & Trust
Maturity
Established
Goal
Prevent unwanted framing with an enforcing CSP frame-ancestors directive or a valid X-Frame-Options fallback.
Result
Frame protection failed at "Validate X-Frame-Options".
Validation steps
Validate CSP frame-ancestors
No enforcing CSP frame-ancestors directive is present.
Validate X-Frame-Options
No valid X-Frame-Options fallback is present.
Review observed browser responses
One or more same-origin HTML documents observed by Chrome did not emit valid frame protection.
Evidence log3 steps · 12 lines
Validate CSP frame-ancestors [warning]! No enforcing CSP frame-ancestors directive is present.INFOValidate CSP frame-ancestorsINFORead CSP frame-ancestors signals enforcingHeaderPresent=false reportOnlyHeaderPresent=false metaFrameAncestors=false policyCount=0 duplicateDirectives=[]WARNCompare effective frame-ancestors directive actual="missing" expected="valid restrictive enforcing frame-ancestors" issue="No enforcing CSP frame-ancestors directive is present."WARNNo enforcing CSP frame-ancestors directive is present.Validate X-Frame-Options [fail]! No valid X-Frame-Options fallback is present.INFOValidate X-Frame-OptionsINFORead X-Frame-Options fallback value="missing" parsedValues=[] normalizedValues=[]FAILCompare X-Frame-Options value actual="missing" expected="DENY or SAMEORIGIN" valid=false obsoleteAllowFrom=false duplicateOrConflicting=false issue="No valid X-Frame-Options fallback is present."FAILNo valid X-Frame-Options fallback is present.Review observed browser responses [warning]! One or more same-origin HTML documents observed by Chrome did not emit valid frame protection.INFOReview observed browser responsesINFOSample Chrome-observed same-origin responses observedResponseCount=31 sameOriginCount=30 htmlDocumentCount=1WARNCompare observed HTML frame protection actual={"missingOrInvalidFrameProtectionCount":1,"broadFrameAncestorsCount":0,"affected":[{"url":"https://mailtrap.io/","status":200,"resourceType":"document","contentType":"text/html; charset=UTF-8","contentSecurityPolicy":null,"contentSecurityPolicyReportOnly":null}]} expected="0 missing/invalid or broad same-origin HTML responses" issue="One or more same-origin HTML documents observed by Chrome did not emit valid frame protection."WARNOne or more same-origin HTML documents observed by Chrome did not emit valid frame protection.
AI DiscoverabilityContent ReadinessEstablished
Semantic HTML
Semantic HTML is partially implemented.
11 Warning
AI DiscoverabilityContent ReadinessEstablished
Semantic HTML
Semantic HTML is partially implemented.
Needs attention
Semantic HTML
Issue
Semantic HTML is incomplete: skipped or empty headings; 1 controls missing accessible names; 14 image alt text quality issues.
Details
Why it matters
Semantic HTML gives browsers, assistive technology, search systems, and agents reliable landmarks, headings, controls, form semantics, and image context.
Check name
Semantic HTML
Score
56/100
Status
warning
Category
Content Readiness
Maturity
Established
Goal
Expose readable page structure through semantic HTML and accessible controls.
Result
Semantic HTML is partially implemented.
Validation steps
Heading structure
Headings skip levels or include empty heading elements.
Links
1 links use generic anchor text.
Buttons and interactive controls
1 button controls are missing accessible names.
Image text alternatives
14 image alt text issues were found.
Evidence log4 steps · 12 lines
Heading structure [fail]! Headings skip levels or include empty heading elements.INFOHeading structureFAILCheck heading structure evidence actual={"counts":{"h1":1,"visibleH1":1,"headings":38,"emptyHeadings":0},"meaningfulH1":true} expected="semantic HTML evidence for this step"FAILHeading structure failed issue="Headings skip levels or include empty heading elements."Links [warning]! 1 links use generic anchor text.INFOLinksWARNCheck links evidence actual={"counts":{"links":286,"inaccessibleLinks":0,"nonCrawlableLinks":0,"genericLinks":1},"accessibleLinks":true} expected="semantic HTML evidence for this step"WARNLinks has a warning issue="1 links use generic anchor text."Buttons and interactive controls [fail]! 1 button controls are missing accessible names.INFOButtons and interactive controlsFAILCheck buttons and interactive controls evidence actual={"counts":{"buttons":4,"inaccessibleButtons":1},"accessibleButtons":false} expected="links, buttons, and form controls expose accessible names"FAILButtons and interactive controls failed issue="1 button controls are missing accessible names."Image text alternatives [warning]! 14 image alt text issues were found.INFOImage text alternativesWARNCheck image text alternatives evidence actual={"counts":{"images":92,"imagesWithAlt":92,"imageAltIssues":14},"imageAltCoverage":true} expected="semantic HTML evidence for this step"WARNImage text alternatives has a warning issue="14 image alt text issues were found."
Agent Ease of UseSkill DiscoveryEmerging recommendation
Agent Skills index
Agent Skills index failed at "Verify advertised artifacts".
11 Fail
Agent Ease of UseSkill DiscoveryEmerging recommendation
Agent Skills index
Agent Skills index failed at "Verify advertised artifacts".
Needs attention
Agent Skills index
Issue
One or more advertised skill artifacts could not be fetched or failed raw-byte digest verification.
Details
Why it matters
An Agent Skills index lets agents discover task-specific instructions through a small trusted index, then verify and load only the skill artifacts they need.
Check name
Agent Skills index
Score
58/100
Status
fail
Category
Skill Discovery
Maturity
Emerging recommendation
Goal
Publish an Agent Skills discovery index that advertises digest-pinned SKILL.md or archive artifacts.
Result
Agent Skills index failed at "Verify advertised artifacts".
Validation steps
Validate skill entries
One or more Agent Skills entries have quality or trust warnings.
Skill entry findings
[ { "url": "https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/sending-emails/SKILL.md", "name": "sending-emails", "type": "skill-md", "index": 0, "valid": true, "digest": "sha256:ed0fb8bbf0136ae591ca5d291fc13db89928c5504f37c6e1fa6eedec350a7fd4", "invalid": [], "missing": [], "warnings": [ "artifact URL is cross-origin; clients must treat it as a separate trust boundary" ], "description": "Use when integrating, configuring, or troubleshooting Mailtrap live email sending (Email API or SMTP). Use when wiring outbound mail from an application or choosing how to send.", "originClass": "external", "resolvedUrl": "https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/sending-emails/SKILL.md" }, { "url": "https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/testing-with-sandbox/SKILL.md", "name": "testing-with-sandbox", "type": "skill-md", "index": 1, "valid": true, "digest": "sha256:d1c8f8fb200d1f17aaa68976a2d0f655215386f2126d0082db22d183365ff739", "invalid": [], "missing": [], "warnings": [ "artifact URL is cross-origin; clients must treat it as a separate trust boundary" ], "description": "Use when capturing outbound email in development or staging without delivering to real recipients, inspecting HTML or headers, running spam or structure checks, or automating tests against a fake inbox. Use when testing outgoing mail from an app without committing to a production ESP yet. Use when using Mailtrap Email Sandbox, Sandbox API, or sandbox-mode sending.", "originClass": "external", "resolvedUrl": "https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/testing-with-sandbox/SKILL.md" }, { "url": "https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/using-email-templates/SKILL.md", "name": "using-email-templates", "type": "skill-md", "index": 2, "valid": true, "digest": "sha256:befddc0bcb622279b9e4f8ba3f75afab1ba68f0b5abe0c6fd4118e007554675b", "invalid": [], "missing": [], "warnings": [ "artifact URL is cross-origin; clients must treat it as a separate trust boundary" ], "description": "Use when creating or sending Mailtrap-hosted email templates, Handlebars personalization, template UUID in API payloads, or debugging variables and preview. Use when separating email design from application code for transactional or bulk sends.", "originClass": "external", "resolvedUrl": "https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/using-email-templates/SKILL.md" }, { "url": "https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/converting-email-templates/SKILL.md", "name": "converting-email-templates", "type": "skill-md", "index": 3, "valid": true, "digest": "sha256:09d18e7a07c8f9682ef33276db75b8e897768279fb9c43bd6f0acc991f918e26", "invalid": [], "missing": [], "warnings": [ "artifact URL is cross-origin; clients must treat it as a separate trust boundary" ], "description": "Use when converting or migrating email templates from another provider (SendGrid, Mailgun, Mandrill, Postmark, Brevo, Amazon SES) to Mailtrap-compatible Handlebars syntax. Supports single file, bulk directory, and inline HTML conversion.", "originClass": "external", "resolvedUrl": "https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/converting-email-templates/SKILL.md" }, { "truncated": true, "omittedCount": 2, "originalCount": 6 } ]Verify advertised artifacts
One or more advertised skill artifacts could not be fetched or failed raw-byte digest verification.
Artifact verification failures
[ { "url": "https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/sending-emails/SKILL.md", "name": "sending-emails", "type": "skill-md", "index": 0, "content": { "reason": "[discarded fetched document data]", "discarded": true, "originalKeys": [ "valid", "warnings", "failures", "security", "quality", "frontmatter" ], "originalType": "object" }, "byteLength": 11014, "statusCode": 200, "contentType": "text/plain; charset=utf-8", "originClass": "external", "actualDigest": "sha256:683c0390b9f86263a7591893d321a7c48f917e045210375ada5d4e23359d1689", "digestMatches": false, "advertisedDigest": "sha256:ed0fb8bbf0136ae591ca5d291fc13db89928c5504f37c6e1fa6eedec350a7fd4" }, { "url": "https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/testing-with-sandbox/SKILL.md", "name": "testing-with-sandbox", "type": "skill-md", "index": 1, "content": { "reason": "[discarded fetched document data]", "discarded": true, "originalKeys": [ "valid", "warnings", "failures", "security", "quality", "frontmatter" ], "originalType": "object" }, "byteLength": 7977, "statusCode": 200, "contentType": "text/plain; charset=utf-8", "originClass": "external", "actualDigest": "sha256:4edde41776549b144fcac43bd5d52e7b413feb9cf8c59d3fd5438a51ce033ccc", "digestMatches": false, "advertisedDigest": "sha256:d1c8f8fb200d1f17aaa68976a2d0f655215386f2126d0082db22d183365ff739" }, { "url": "https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/using-email-templates/SKILL.md", "name": "using-email-templates", "type": "skill-md", "index": 2, "content": { "reason": "[discarded fetched document data]", "discarded": true, "originalKeys": [ "valid", "warnings", "failures", "security", "quality", "frontmatter" ], "originalType": "object" }, "byteLength": 5566, "statusCode": 200, "contentType": "text/plain; charset=utf-8", "originClass": "external", "actualDigest": "sha256:d11639391ed124e7924712ee4a8b4aeb4ba21efb55df7b574f6732663e99f0df", "digestMatches": false, "advertisedDigest": "sha256:befddc0bcb622279b9e4f8ba3f75afab1ba68f0b5abe0c6fd4118e007554675b" }, { "url": "https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/converting-email-templates/SKILL.md", "name": "converting-email-templates", "type": "skill-md", "index": 3, "content": { "reason": "[discarded fetched document data]", "discarded": true, "originalKeys": [ "valid", "warnings", "failures", "security", "quality", "frontmatter" ], "originalType": "object" }, "byteLength": 7080, "statusCode": 200, "contentType": "text/plain; charset=utf-8", "originClass": "external", "actualDigest": "sha256:e279422605e93d3cf32853850684287f9c0b81f7c95e8325f3553e03038eda9e", "digestMatches": false, "advertisedDigest": "sha256:09d18e7a07c8f9682ef33276db75b8e897768279fb9c43bd6f0acc991f918e26" }, { "truncated": true, "omittedCount": 2, "originalCount": 6 } ]Validate skill content
description is short; stronger skills describe both task scope and when to use the skill.
Skill content findings
- description is short; stronger skills describe both task scope and when to use the skill.
- description does not clearly state when an agent should activate the skill.
- description is short; stronger skills describe both task scope and when to use the skill.
- description does not clearly state when an agent should activate the skill.
{ "truncated": true, "omittedCount": 8, "originalCount": 12 }
Review skill artifact security
SKILL.md references external URLs; fetched content is an additional trust boundary (https://docs.mailtrap.io/developers/email-sending/transactional.md, https://docs.mailtrap.io/developers/email-sending/bulk.md, https://send.api.mailtrap.io/api/send`, https://send.api.mailtrap.io/api/batch`, https://bulk.api.mailtrap.io/api/send`, https://bulk.api.mailtrap.io/api/batch`, https://docs.mailtrap.io/developers/email-sending/transactional.md#post-api-send, https://docs.mailtrap.io/developers/email-sending/bulk.md#post-api-send).
Agent Skills security findings
- SKILL.md references external URLs; fetched content is an additional trust boundary (https://docs.mailtrap.io/developers/email-sending/transactional.md, https://docs.mailtrap.io/developers/email-sending/bulk.md, https://send.api.mailtrap.io/api/send`, https://send.api.mailtrap.io/api/batch`, https://bulk.api.mailtrap.io/api/send`, https://bulk.api.mailtrap.io/api/batch`, https://docs.mailtrap.io/developers/email-sending/transactional.md#post-api-send, https://docs.mailtrap.io/developers/email-sen...[truncated 28 chars]
- SKILL.md references external URLs; fetched content is an additional trust boundary (https://docs.mailtrap.io/developers/, https://sandbox.api.mailtrap.io/api/send/{inbox_id}`, https://mailtrap.io/api/accounts`., https://mailtrap.io/api/accounts/$MAILTRAP_ACCOUNT_ID/inboxes`, https://docs.mailtrap.io/developers/email-sandbox/sandboxes-inboxes.md, https://mailtrap.io/api/accounts/$MAILTRAP_ACCOUNT_ID/inboxes/{inbox_id}/messages`, https://docs.mailtrap.io/developers/email-sandbox/messages.md, https...[truncated 84 chars]
- SKILL.md references external URLs; fetched content is an additional trust boundary (https://docs.mailtrap.io/developers/templates/templates.md, https://docs.mailtrap.io/developers/email-sending/transactional.md, https://send.api.mailtrap.io`, https://docs.mailtrap.io/developers/email-sending/bulk.md, https://bulk.api.mailtrap.io`, https://send.api.mailtrap.io/api/send, https://docs.mailtrap.io/email-api-smtp/email-templates/handlebars.md, https://docs.mailtrap.io/email-api-smtp/email-templates/h...[truncated 48 chars]
- SKILL.md references external URLs; fetched content is an additional trust boundary (https://docs.mailtrap.io/email-api-smtp/setup/sending-domain.md, https://mailtrap.io/api/accounts`, https://mailtrap.io/api/accounts/$MAILTRAP_ACCOUNT_ID/sending_domains`, https://mailtrap.io/api/accounts/$MAILTRAP_ACCOUNT_ID/sending_domains/{sending_domain_id}`, https://developers.cloudflare.com/api/, https://docs.mailtrap.io/email-api-smtp/setup/sending-domain/cloudflare.md, https://docs.mailtrap.io/email-api-s...[truncated 124 chars]
{ "truncated": true, "omittedCount": 1, "originalCount": 5 }
Evidence log4 steps · 47 lines
Validate skill entries [warning]! One or more Agent Skills entries have quality or trust warnings.INFOValidate skill entriesWARNCompare advertised skill count actual=6 expected="> 0"WARNCompare valid skill entry count actual=6 expected="same as advertised skill count"WARNSkill entry warning skill={"index":0,"valid":true,"name":"sending-emails","type":"skill-md","description":"Use when integrating, configuring, or troubleshooting Mailtrap live email sending (Email API or SMTP). Use when wiring outbound mail from an application or choosing how to send.","url":"https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/sending-emails/SKILL.md","digest":"sha256:ed0fb8bbf0136ae591ca5d291fc13db89928c5504f37c6e1fa6eedec350a7fd4","resolvedUrl":"https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/sending-emails/SKILL.md","originClass":"external","missing":[],"invalid":[],"warnings":["artifact URL is cross-origin; clients must treat it as a separate trust boundary"]}WARNSkill entry warning skill={"index":1,"valid":true,"name":"testing-with-sandbox","type":"skill-md","description":"Use when capturing outbound email in development or staging without delivering to real recipients, inspecting HTML or headers, running spam or structure checks, or automating tests against a fake inbox. Use when testing outgoing mail from an app without committing to a production ESP yet. Use when using Mailtrap Email Sandbox, Sandbox API, or sandbox-mode sending.","url":"https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/testing-with-sandbox/SKILL.md","digest":"sha256:d1c8f8fb200d1f17aaa68976a2d0f655215386f2126d0082db22d183365ff739","resolvedUrl":"https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/testing-with-sandbox/SKILL.md","originClass":"external","missing":[],"invalid":[],"warnings":["artifact URL is cross-origin; clients must treat it as a separate trust boundary"]}WARNSkill entry warning skill={"index":2,"valid":true,"name":"using-email-templates","type":"skill-md","description":"Use when creating or sending Mailtrap-hosted email templates, Handlebars personalization, template UUID in API payloads, or debugging variables and preview. Use when separating email design from application code for transactional or bulk sends.","url":"https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/using-email-templates/SKILL.md","digest":"sha256:befddc0bcb622279b9e4f8ba3f75afab1ba68f0b5abe0c6fd4118e007554675b","resolvedUrl":"https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/using-email-templates/SKILL.md","originClass":"external","missing":[],"invalid":[],"warnings":["artifact URL is cross-origin; clients must treat it as a separate trust boundary"]}WARNSkill entry warning skill={"index":3,"valid":true,"name":"converting-email-templates","type":"skill-md","description":"Use when converting or migrating email templates from another provider (SendGrid, Mailgun, Mandrill, Postmark, Brevo, Amazon SES) to Mailtrap-compatible Handlebars syntax. Supports single file, bulk directory, and inline HTML conversion.","url":"https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/converting-email-templates/SKILL.md","digest":"sha256:09d18e7a07c8f9682ef33276db75b8e897768279fb9c43bd6f0acc991f918e26","resolvedUrl":"https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/converting-email-templates/SKILL.md","originClass":"external","missing":[],"invalid":[],"warnings":["artifact URL is cross-origin; clients must treat it as a separate trust boundary"]}WARNSkill entry warning skill={"index":4,"valid":true,"name":"setting-up-sending-domain","type":"skill-md","description":"Use when adding or verifying a Mailtrap sending domain, DNS propagation issues, registrar or DNS provider steps, compliance after verification, or click tracking. Domain must be verified before sending from it.","url":"https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/setting-up-sending-domain/SKILL.md","digest":"sha256:a0d39031e1bbaf96f9ed01a9e5471b6605b097fbe0c1429fb61a04511ff207b1","resolvedUrl":"https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/setting-up-sending-domain/SKILL.md","originClass":"external","missing":[],"invalid":[],"warnings":["artifact URL is cross-origin; clients must treat it as a separate trust boundary"]}WARNSkill entry warning skill={"index":5,"valid":true,"name":"managing-contacts","type":"skill-md","description":"Use when using Mailtrap Contacts API or UI to add, update, bulk import, list, segment marketing contacts, custom fields, or custom events. Use when syncing contacts from a CRM or warehouse, or building audiences for campaigns.","url":"https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/managing-contacts/SKILL.md","digest":"sha256:a8ae131d008a3f8bedba355a83d62f6264028a10c1b695ee465a0d12736925f3","resolvedUrl":"https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/managing-contacts/SKILL.md","originClass":"external","missing":[],"invalid":[],"warnings":["artifact URL is cross-origin; clients must treat it as a separate trust boundary"]}WARNOne or more Agent Skills entries have quality or trust warnings.Verify advertised artifacts [fail]! One or more advertised skill artifacts could not be fetched or failed raw-byte digest verification.INFOVerify advertised artifactsFAILCompare artifact fetch count actual=6 expected=6FAILArtifact fetch or digest verification failed name="sending-emails" type="skill-md" url="https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/sending-emails/SKILL.md" statusCode=200 byteLength=11014 advertisedDigest="sha256:ed0fb8bbf0136ae591ca5d291fc13db89928c5504f37c6e1fa6eedec350a7fd4" actualDigest="sha256:683c0390b9f86263a7591893d321a7c48f917e045210375ada5d4e23359d1689"FAILArtifact fetch or digest verification failed name="testing-with-sandbox" type="skill-md" url="https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/testing-with-sandbox/SKILL.md" statusCode=200 byteLength=7977 advertisedDigest="sha256:d1c8f8fb200d1f17aaa68976a2d0f655215386f2126d0082db22d183365ff739" actualDigest="sha256:4edde41776549b144fcac43bd5d52e7b413feb9cf8c59d3fd5438a51ce033ccc"FAILArtifact fetch or digest verification failed name="using-email-templates" type="skill-md" url="https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/using-email-templates/SKILL.md" statusCode=200 byteLength=5566 advertisedDigest="sha256:befddc0bcb622279b9e4f8ba3f75afab1ba68f0b5abe0c6fd4118e007554675b" actualDigest="sha256:d11639391ed124e7924712ee4a8b4aeb4ba21efb55df7b574f6732663e99f0df"FAILArtifact fetch or digest verification failed name="converting-email-templates" type="skill-md" url="https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/converting-email-templates/SKILL.md" statusCode=200 byteLength=7080 advertisedDigest="sha256:09d18e7a07c8f9682ef33276db75b8e897768279fb9c43bd6f0acc991f918e26" actualDigest="sha256:e279422605e93d3cf32853850684287f9c0b81f7c95e8325f3553e03038eda9e"FAILArtifact fetch or digest verification failed name="setting-up-sending-domain" type="skill-md" url="https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/setting-up-sending-domain/SKILL.md" statusCode=200 byteLength=4989 advertisedDigest="sha256:a0d39031e1bbaf96f9ed01a9e5471b6605b097fbe0c1429fb61a04511ff207b1" actualDigest="sha256:8fbe6b442e235b19dc84d5809dbef0a65fbcd452cd9e34bbf68ea298dd606a6b"FAILArtifact fetch or digest verification failed name="managing-contacts" type="skill-md" url="https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/managing-contacts/SKILL.md" statusCode=200 byteLength=7428 advertisedDigest="sha256:a8ae131d008a3f8bedba355a83d62f6264028a10c1b695ee465a0d12736925f3" actualDigest="sha256:077eda98bc47133a7f27171697f00eff40bae2ea95b91c76fb2dab9e91c4f328"FAILOne or more advertised skill artifacts could not be fetched or failed raw-byte digest verification.Validate skill content [warning]! description is short; stronger skills describe both task scope and when to use the skill.INFOValidate skill contentWARNCompare skill artifact content failures actual=0 expected=0 name="sending-emails" type="skill-md" url="https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/sending-emails/SKILL.md"WARNSkill content validation warning name="sending-emails" warning="description is short; stronger skills describe both task scope and when to use the skill."WARNSkill content validation warning name="sending-emails" warning="description does not clearly state when an agent should activate the skill."WARNCompare skill artifact content failures actual=0 expected=0 name="testing-with-sandbox" type="skill-md" url="https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/testing-with-sandbox/SKILL.md"WARNSkill content validation warning name="testing-with-sandbox" warning="description is short; stronger skills describe both task scope and when to use the skill."WARNSkill content validation warning name="testing-with-sandbox" warning="description does not clearly state when an agent should activate the skill."WARNCompare skill artifact content failures actual=0 expected=0 name="using-email-templates" type="skill-md" url="https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/using-email-templates/SKILL.md"WARNSkill content validation warning name="using-email-templates" warning="description is short; stronger skills describe both task scope and when to use the skill."WARNSkill content validation warning name="using-email-templates" warning="description does not clearly state when an agent should activate the skill."WARNCompare skill artifact content failures actual=0 expected=0 name="converting-email-templates" type="skill-md" url="https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/converting-email-templates/SKILL.md"WARNSkill content validation warning name="converting-email-templates" warning="description is short; stronger skills describe both task scope and when to use the skill."WARNSkill content validation warning name="converting-email-templates" warning="description does not clearly state when an agent should activate the skill."WARNCompare skill artifact content failures actual=0 expected=0 name="setting-up-sending-domain" type="skill-md" url="https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/setting-up-sending-domain/SKILL.md"WARNSkill content validation warning name="setting-up-sending-domain" warning="description is short; stronger skills describe both task scope and when to use the skill."WARNSkill content validation warning name="setting-up-sending-domain" warning="description does not clearly state when an agent should activate the skill."WARNCompare skill artifact content failures actual=0 expected=0 name="managing-contacts" type="skill-md" url="https://raw.githubusercontent.com/mailtrap/mailtrap-skills/refs/heads/main/skills/managing-contacts/SKILL.md"WARNSkill content validation warning name="managing-contacts" warning="description is short; stronger skills describe both task scope and when to use the skill."WARNSkill content validation warning name="managing-contacts" warning="description does not clearly state when an agent should activate the skill."WARNdescription is short; stronger skills describe both task scope and when to use the skill.Review skill artifact security [warning]! SKILL.md references external URLs; fetched content is an additional trust boundary (https://docs.mailtrap.io/developers/email-sending/transactional.md, https://docs.mailtrap.io/developers/email-sending/bulk.md, https://send.api.mailtrap.io/api/send`, https://send.api.mailtrap.io/api/batch`, https://bulk.api.mailtrap.io/api/send`, https://bulk.api.mailtrap.io/api/batch`, https://docs.mailtrap.io/developers/email-sending/transactional.md#post-api-send, https://docs.mailtrap.io/developers/email-sending/bulk.md#post-api-send).INFOReview skill artifact securityFAILCompare security finding count actual=5 expected=0WARNAgent Skills artifact security warning finding="SKILL.md references external URLs; fetched content is an additional trust boundary (https://docs.mailtrap.io/developers/email-sending/transactional.md, https://docs.mailtrap.io/developers/email-sending/bulk.md, https://send.api.mailtrap.io/api/send`, https://send.api.mailtrap.io/api/batch`, https://bulk.api.mailtrap.io/api/send`, https://bulk.api.mailtrap.io/api/batch`, https://docs.mailtrap.io/developers/email-sending/transactional.md#post-api-send, https://docs.mailtrap.io/developers/email-sending/bulk.md#post-api-send)."WARNAgent Skills artifact security warning finding="SKILL.md references external URLs; fetched content is an additional trust boundary (https://docs.mailtrap.io/developers/, https://sandbox.api.mailtrap.io/api/send/{inbox_id}`, https://mailtrap.io/api/accounts`., https://mailtrap.io/api/accounts/$MAILTRAP_ACCOUNT_ID/inboxes`, https://docs.mailtrap.io/developers/email-sandbox/sandboxes-inboxes.md, https://mailtrap.io/api/accounts/$MAILTRAP_ACCOUNT_ID/inboxes/{inbox_id}/messages`, https://docs.mailtrap.io/developers/email-sandbox/messages.md, https://mailtrap.io/api/accounts/$MAILTRAP_ACCOUNT_ID/inboxes/{inbox_id}/messages/{id}`)."WARNAgent Skills artifact security warning finding="SKILL.md references external URLs; fetched content is an additional trust boundary (https://docs.mailtrap.io/developers/templates/templates.md, https://docs.mailtrap.io/developers/email-sending/transactional.md, https://send.api.mailtrap.io`, https://docs.mailtrap.io/developers/email-sending/bulk.md, https://bulk.api.mailtrap.io`, https://send.api.mailtrap.io/api/send, https://docs.mailtrap.io/email-api-smtp/email-templates/handlebars.md, https://docs.mailtrap.io/email-api-smtp/email-templates/handlebars.md#testing-templates-with-handlebars)."WARNAgent Skills artifact security warning finding="SKILL.md references external URLs; fetched content is an additional trust boundary (https://docs.mailtrap.io/email-api-smtp/setup/sending-domain.md, https://mailtrap.io/api/accounts`, https://mailtrap.io/api/accounts/$MAILTRAP_ACCOUNT_ID/sending_domains`, https://mailtrap.io/api/accounts/$MAILTRAP_ACCOUNT_ID/sending_domains/{sending_domain_id}`, https://developers.cloudflare.com/api/, https://docs.mailtrap.io/email-api-smtp/setup/sending-domain/cloudflare.md, https://docs.mailtrap.io/email-api-smtp/setup/sending-domain/aws-route-53.md, https://docs.mailtrap.io/email-api-smtp/setup/sending-domain/google-cloud-dns.md)."WARNAgent Skills artifact security warning finding="SKILL.md references external URLs; fetched content is an additional trust boundary (https://github.com/mailtrap/mailtrap-openapi/blob/main/specs/contacts.openapi.yml, https://docs.mailtrap.io/email-marketing/contacts/import-contacts.md, https://docs.mailtrap.io/developers/email-sending/suppressions.md, https://docs.mailtrap.io/developers/promotional/contacts/bulk-import.md, https://docs.mailtrap.io/email-marketing/automations.md, https://docs.mailtrap.io/email-marketing/contacts/custom-fields.md, https://mailtrap.io/api/accounts`., https://mailtrap.io/api/accounts/$MAILTRAP_ACCOUNT_ID/contacts`)."WARNSKILL.md references external URLs; fetched content is an additional trust boundary (https://docs.mailtrap.io/developers/email-sending/transactional.md, https://docs.mailtrap.io/developers/email-sending/bulk.md, https://send.api.mailtrap.io/api/send`, https://send.api.mailtrap.io/api/batch`, https://bulk.api.mailtrap.io/api/send`, https://bulk.api.mailtrap.io/api/batch`, https://docs.mailtrap.io/developers/email-sending/transactional.md#post-api-send, https://docs.mailtrap.io/developers/email-sending/bulk.md#post-api-send).
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AEO: Answer-first passages
AEO: Answer-first passages scored 22/100 and needs a fix.
9 Fail
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AEO: Answer-first passages
AEO: Answer-first passages scored 22/100 and needs a fix.
Needs attention
AEO: Answer-first passages
Issue
36 section(s) bury or omit a concise opening answer.
Details
Why it matters
Answer engines need visible answer passages, clear question and heading structure, entity definitions, evidence, and trust signals. These signals improve extraction and attribution, but they do not guarantee answer-engine citations or search features.
Check name
AEO: Answer-first passages
Score
22/100
Status
fail
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content easy for answer engines and assistants to extract, answer from, and attribute without promising inclusion in any proprietary answer surface.
Result
AEO: Answer-first passages scored 22/100 and needs a fix.
Security & TrustSecurity & TrustEstablished
X-Content-Type-Options
X-Content-Type-Options failed at "Find X-Content-Type-Options".
9 Fail
Security & TrustSecurity & TrustEstablished
X-Content-Type-Options
X-Content-Type-Options failed at "Find X-Content-Type-Options".
Needs attention
X-Content-Type-Options
Issue
Browser-loadable response is missing X-Content-Type-Options.
Why it matters
X-Content-Type-Options tells browsers to trust declared media types instead of sniffing content, reducing the risk that mislabeled files execute as active content.
Check name
X-Content-Type-Options
Score
57/100
Status
fail
Category
Security & Trust
Maturity
Established
Goal
Prevent browser MIME sniffing for browser-loadable responses with X-Content-Type-Options: nosniff.
Result
X-Content-Type-Options failed at "Find X-Content-Type-Options".
Validation steps
Find X-Content-Type-Options
Browser-loadable response is missing X-Content-Type-Options.
Review observed browser responses
One or more same-origin active resources observed by Chrome did not emit X-Content-Type-Options: nosniff.
Evidence log2 steps · 8 lines
Find X-Content-Type-Options [fail]! Browser-loadable response is missing X-Content-Type-Options.INFOFind X-Content-Type-OptionsINFORead X-Content-Type-Options header header="x-content-type-options" value="missing"FAILRequire nosniff header actual="missing" expected="present" issue="Browser-loadable response is missing X-Content-Type-Options."FAILBrowser-loadable response is missing X-Content-Type-Options.Review observed browser responses [warning]! One or more same-origin active resources observed by Chrome did not emit X-Content-Type-Options: nosniff.INFOReview observed browser responsesINFOSample Chrome-observed same-origin resources observedResponseCount=31 sameOriginCount=30 eligibleCount=29WARNCompare observed nosniff coverage actual={"missingNosniffCount":29,"malformedNosniffCount":0,"activeResourceMissingNosniffCount":14,"affected":[{"url":"https://mailtrap.io/","status":200,"resourceType":"document","contentType":"text/html; charset=UTF-8"},{"url":"https://mailtrap.io/wp-content/themes/mailtrap/style.css","status":200,"resourceType":"stylesheet","contentType":"text/css; charset=utf-8"},{"url":"https://mailtrap.io/wp-content/cache/min/1/wp-content/plugins/embedpress/assets/css/embedpress.css?ver=1781279602","status":200,"resourceType":"stylesheet","contentType":"text/css; charset=utf-8"},{"url":"https://mailtrap.io/wp-content/cache/min/1/wp-content/plugins/embedpress/assets/css/blocks.build.css?ver=1781279602","status":200,"resourceType":"stylesheet","contentType":"text/css; charset=utf-8"},{"url":"https://mailtrap.io/wp-content/cache/min/1/wp-content/themes/mailtrap/sass/base/style.css?ver=1781279602","status":200,"resourceType":"stylesheet","contentType":"text/css; charset=utf-8"},{"url":"https://mailtrap.io/wp-content/cache/min/1/wp-content/themes/mailtrap/dist/default_page.css?ver=1781279602","status":200,"resourceType":"stylesheet","contentType":"text/css; charset=utf-8"},{"url":"https://mailtrap.io/wp-content/cache/min/1/wp-content/themes/mailtrap/dist/vendor.css?ver=1781279602","status":200,"resourceType":"stylesheet","contentType":"text/css; charset=utf-8"},{"url":"https://mailtrap.io/wp-content/cache/min/1/wp-content/themes/mailtrap/dist/acf_block_companies_logos.css?ver=1781279602","status":200,"resourceType":"stylesheet","contentType":"text/css; charset=utf-8"},{"url":"https://mailtrap.io/wp-content/cache/min/1/wp-content/themes/mailtrap/dist/acf_block_tweeter_messages.css?ver=1781279602","status":200,"resourceType":"stylesheet","contentType":"text/css; charset=utf-8"},{"url":"https://mailtrap.io/wp-content/cache/min/1/wp-content/themes/mailtrap/dist/acf_block_content_with_media.css?ver=1781279602","status":200,"resourceType":"stylesheet","contentType":"text/css; charset=utf-8"},{"url":"https://mailtrap.io/wp-content/uploads/2025/11/for-sending.webp","status":200,"resourceType":"image"},{"url":"https://mailtrap.io/wp-content/cache/min/1/wp-content/themes/mailtrap/dist/acf_inner_banner.css?ver=1781279602","status":200,"resourceType":"stylesheet","contentType":"text/css; charset=utf-8"}]} expected="0 missing or malformed eligible same-origin responses" issue="One or more same-origin active resources observed by Chrome did not emit X-Content-Type-Options: nosniff."WARNOne or more same-origin active resources observed by Chrome did not emit X-Content-Type-Options: nosniff.
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
GEO: Citable passages
GEO: Citable passages scored 35/100 and needs a fix.
8 Fail
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
GEO: Citable passages
GEO: Citable passages scored 35/100 and needs a fix.
Needs attention
GEO: Citable passages
Issue
No evidence-backed, citation-length explanatory paragraph was found.
Details
Why it matters
Generative answer systems work best with visible, self-contained, evidence-backed content, clear entities, trustworthy attribution, structured page sections, and crawler-accessible HTML. These signals improve machine understanding even though they do not guarantee AI citations.
Check name
GEO: Citable passages
Score
35/100
Status
fail
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content easy for AI answer engines to extract, cite, and attribute without promising inclusion in any proprietary answer surface.
Result
GEO: Citable passages scored 35/100 and needs a fix.
Agent Ease of UseAPIEstablished
API Catalog
API Catalog has a validation warning at "Check API catalog HEAD Link header".
7 Warning
Agent Ease of UseAPIEstablished
API Catalog
API Catalog has a validation warning at "Check API catalog HEAD Link header".
Needs attention
API Catalog
Issue
HEAD /.well-known/api-catalog did not expose a Link header with rel="api-catalog".
Why it matters
API catalogs help agents find API endpoints, service descriptions, documentation, status resources, auth metadata, and related machine-readable contracts without guessing entry points.
Check name
API Catalog
Score
87/100
Status
warning
Category
API
Maturity
Established
Goal
Publish an API catalog for automated public API discovery using RFC 9727 when this origin exposes public APIs.
Result
API Catalog has a validation warning at "Check API catalog HEAD Link header".
Validation steps
Check API catalog HEAD Link header
HEAD /.well-known/api-catalog did not expose a Link header with rel="api-catalog".
Validate API catalog targets
API catalog targets are external or same-site only; they were recorded but not fetched by this origin-scoped check.
Evidence log2 steps · 20 lines
Check API catalog HEAD Link header [warning]! HEAD /.well-known/api-catalog did not expose a Link header with rel="api-catalog".INFOCheck API catalog HEAD Link headerINFOSend HEAD request to API catalog path attempted=true statusCode=200 contentType="application/linkset+json; profile=\"https://www.rfc-editor.org/info/rfc9727\""WARNCompare HEAD Link rel=api-catalog count actual=0 expected="> 0"WARNHEAD /.well-known/api-catalog did not expose a Link header with rel="api-catalog". status="warning"Validate API catalog targets [warning]! API catalog targets are external or same-site only; they were recorded but not fetched by this origin-scoped check.INFOValidate API catalog targetsINFOFetch same-origin API catalog targets and record same-site/external skipsSKIPSkipped API catalog target fetch rel="service-desc" href="https://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/account-management.openapi.yml" resolvedUrl="https://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/account-management.openapi.yml" reason="External target was recorded but not fetched."SKIPSkipped API catalog target fetch rel="service-desc" href="https://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/contacts.openapi.yml" resolvedUrl="https://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/contacts.openapi.yml" reason="External target was recorded but not fetched."SKIPSkipped API catalog target fetch rel="service-desc" href="https://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/email-sending.openapi.yml" resolvedUrl="https://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/email-sending.openapi.yml" reason="External target was recorded but not fetched."SKIPSkipped API catalog target fetch rel="service-desc" href="https://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/sandbox.openapi.yml" resolvedUrl="https://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/sandbox.openapi.yml" reason="External target was recorded but not fetched."SKIPSkipped API catalog target fetch rel="service-desc" href="https://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/templates.openapi.yml" resolvedUrl="https://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/templates.openapi.yml" reason="External target was recorded but not fetched."SKIPSkipped API catalog target fetch rel="service-doc" href="https://docs.mailtrap.io/developers" resolvedUrl="https://docs.mailtrap.io/developers" reason="Same-site target was recorded but not fetched."SKIPSkipped API catalog target fetch rel="service-desc" href="https://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/email-sending-transactional.openapi.yml" resolvedUrl="https://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/email-sending-transactional.openapi.yml" reason="External target was recorded but not fetched."SKIPSkipped API catalog target fetch rel="service-doc" href="https://docs.mailtrap.io/developers" resolvedUrl="https://docs.mailtrap.io/developers" reason="Same-site target was recorded but not fetched."SKIPSkipped API catalog target fetch rel="service-desc" href="https://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/email-sending-bulk.openapi.yml" resolvedUrl="https://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/email-sending-bulk.openapi.yml" reason="External target was recorded but not fetched."SKIPSkipped API catalog target fetch rel="service-doc" href="https://docs.mailtrap.io/developers" resolvedUrl="https://docs.mailtrap.io/developers" reason="Same-site target was recorded but not fetched."SKIPSkipped API catalog target fetch rel="service-desc" href="https://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/sandbox-sending.openapi.yml" resolvedUrl="https://raw.githubusercontent.com/mailtrap/mailtrap-openapi/main/specs/sandbox-sending.openapi.yml" reason="External target was recorded but not fetched."SKIPSkipped API catalog target fetch rel="service-doc" href="https://docs.mailtrap.io/developers" resolvedUrl="https://docs.mailtrap.io/developers" reason="Same-site target was recorded but not fetched."WARNCompare API catalog target failure count actual=0 expected=0WARNAPI catalog targets are external or same-site only; they were recorded but not fetched by this origin-scoped check. status="warning"
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AEO: Evidence and trust
AEO: Evidence and trust scored 57/100 and needs improvement.
5 Warning
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AEO: Evidence and trust
AEO: Evidence and trust scored 57/100 and needs improvement.
Needs attention
AEO: Evidence and trust
Issue
Missing answer evidence or trust signals: author, publisher, sameAs.
Details
Why it matters
Answer engines need visible answer passages, clear question and heading structure, entity definitions, evidence, and trust signals. These signals improve extraction and attribution, but they do not guarantee answer-engine citations or search features.
Check name
AEO: Evidence and trust
Score
57/100
Status
warning
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content easy for answer engines and assistants to extract, answer from, and attribute without promising inclusion in any proprietary answer surface.
Result
AEO: Evidence and trust scored 57/100 and needs improvement.
Security & TrustSecurity & TrustEstablished
HSTS header
HSTS header failed at "Validate max-age".
5 Fail
Security & TrustSecurity & TrustEstablished
HSTS header
HSTS header failed at "Validate max-age".
Needs attention
HSTS header
Issue
max-age=0 removes the HSTS policy.
Why it matters
HSTS tells browsers to keep using HTTPS after the first secure visit, reducing downgrade, SSL-stripping, and mixed-transport risk for repeat users.
Check name
HSTS header
Score
75/100
Status
fail
Category
Security & Trust
Maturity
Established
Goal
Require HTTPS for repeat browser visits with a valid Strict-Transport-Security policy.
Result
HSTS header failed at "Validate max-age".
Validation steps
Validate max-age
max-age=0 removes the HSTS policy.
Evidence log1 step · 4 lines
Validate max-age [fail]! max-age=0 removes the HSTS policy.INFOValidate max-ageINFOInspect max-age directive maxAge=0 deploymentMinimumSeconds=15552000 preloadStrengthSeconds=31536000FAILCompare HSTS max-age actual=0 expected=">= 15552000 seconds" meetsMinimum=false meetsOneYear=false issue="max-age=0 removes the HSTS policy."FAILmax-age=0 removes the HSTS policy.GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AIO: Source and trust signals
AIO: Source and trust signals scored 67/100 and needs improvement.
5 Warning
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AIO: Source and trust signals
AIO: Source and trust signals scored 67/100 and needs improvement.
Needs attention
AIO: Source and trust signals
Issue
Missing AIO trust signals: author, publisher.
Details
Why it matters
Google AI Overviews and AI Mode depend on normal Google Search eligibility, snippet permissions, useful visible content, consistent structured data, trust signals, and page experience basics. These signals help Google understand and preview a page, but they do not guarantee selection.
Check name
AIO: Source and trust signals
Score
67/100
Status
warning
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content eligible, understandable, and previewable for Google Search AI features without promising inclusion.
Result
AIO: Source and trust signals scored 67/100 and needs improvement.
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
GEO: Structured extraction
GEO: Structured extraction scored 63/100 and needs improvement.
4 Warning
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
GEO: Structured extraction
GEO: Structured extraction scored 63/100 and needs improvement.
Needs attention
GEO: Structured extraction
Issue
Missing or weak extraction signals: clean heading hierarchy, summary or key takeaways, FAQ or question-answer section where appropriate.
Details
Why it matters
Generative answer systems work best with visible, self-contained, evidence-backed content, clear entities, trustworthy attribution, structured page sections, and crawler-accessible HTML. These signals improve machine understanding even though they do not guarantee AI citations.
Check name
GEO: Structured extraction
Score
63/100
Status
warning
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content easy for AI answer engines to extract, cite, and attribute without promising inclusion in any proprietary answer surface.
Result
GEO: Structured extraction scored 63/100 and needs improvement.
AI DiscoverabilityContent ReadinessEstablished
Structured data
Structured data failed at "Page-relevant schema family".
4 Fail
AI DiscoverabilityContent ReadinessEstablished
Structured data
Structured data failed at "Page-relevant schema family".
Needs attention
Structured data
Issue
The page has specific visible content intent, but structured data does not include a matching primary schema family.
Why it matters
Structured data gives agents explicit entities, relationships, and page meaning that are harder to infer reliably from visual layout alone.
Check name
Structured data
Score
83/100
Status
fail
Category
Content Readiness
Maturity
Established
Goal
Expose machine-readable page entities and relationships through a recognized structured-data syntax.
Result
Structured data failed at "Page-relevant schema family".
Validation steps
Page-relevant schema family
The page has specific visible content intent, but structured data does not include a matching primary schema family.
Evidence log1 step · 4 lines
Page-relevant schema family [fail]! The page has specific visible content intent, but structured data does not include a matching primary schema family.INFOPage-relevant schema familyINFOInferring specific page intent and comparing it with detected Schema.org typesFAILCheck schema types matching specific visible page intent actual=0 expected="> 0" inferredIntents=["software","job"] expectedTypes=["SoftwareApplication","WebApplication","MobileApplication","JobPosting"] matchingTypes=[] observedTypes=["ImageObject","Organization","WebPage","WebSite"]FAILNo primary schema family matches the inferred page intent expectedTypes=["SoftwareApplication","WebApplication","MobileApplication","JobPosting"] primaryTypes=[]AI DiscoverabilityContent ReadinessEstablished
Organization / WebSite schema
Organization / WebSite schema is partially implemented.
4 Warning
AI DiscoverabilityContent ReadinessEstablished
Organization / WebSite schema
Organization / WebSite schema is partially implemented.
Needs attention
Organization / WebSite schema
Issue
Missing identity field(s): Organization.url. Organization schema is missing sameAs or public contact evidence.
Why it matters
Organization and WebSite schema help agents identify the publisher, canonical site identity, logo, and related profiles for attribution.
Check name
Organization / WebSite schema
Score
83/100
Status
warning
Category
Content Readiness
Maturity
Established
Goal
Identify the site owner and website entity in structured data.
Result
Organization / WebSite schema is partially implemented.
Validation steps
Identity fields
Missing identity field(s): Organization.url.
Organization trust fields
Organization schema is missing sameAs or public contact evidence.
Evidence log2 steps · 10 lines
Identity fields [warning]! Missing identity field(s): Organization.url.INFOIdentity fieldsINFOChecking Organization and WebSite name/url fields organizationFormat="json-ld" websiteFormat="json-ld"WARNCheck required identity fields actual=3 expected=4 missing=["Organization.url"] organizationFields=[{"name":"Organization.@type","present":true,"value":"Organization","format":"json-ld"},{"name":"Organization.@id","present":true,"value":"https://mailtrap.io/#organization","format":"json-ld"},{"name":"Organization.name","present":true,"value":"Mailtrap","format":"json-ld"},{"name":"Organization.url","present":false,"format":"json-ld"},{"name":"Organization.logo","present":true,"value":"https://mailtrap.io/wp-content/uploads/2018/11/cropped-512px-mailtrap-logo-1.png","format":"json-ld"},{"name":"Organization.sameAs","present":false,"format":"json-ld"}] websiteFields=[{"name":"WebSite.@type","present":true,"value":"WebSite","format":"json-ld"},{"name":"WebSite.@id","present":true,"value":"https://mailtrap.io/#website","format":"json-ld"},{"name":"WebSite.name","present":true,"value":"Mailtrap","format":"json-ld"},{"name":"WebSite.url","present":true,"value":"https://mailtrap.io","format":"json-ld"},{"name":"WebSite.publisher.@id","present":true,"value":"https://mailtrap.io/#organization","format":"json-ld"},{"name":"WebSite.publisher.name","present":false,"format":"json-ld"},{"name":"WebSite.publisher.url","present":false,"format":"json-ld"}]WARNCheck identity URLs match scanned origin actual={"organizationUrlMatchesOrigin":false,"websiteUrlMatchesOrigin":true} expected={"organizationUrlMatchesOrigin":true,"websiteUrlMatchesOrigin":true}WARNIdentity fields are partially complete missing=["Organization.url"]Organization trust fields [warning]! Organization schema is missing sameAs or public contact evidence.INFOOrganization trust fieldsINFOChecking logo, sameAs, and public contact evidence format="json-ld"PASSCheck logo presence actual=true expected=true fields=[{"name":"Organization.logo","present":true,"value":"https://mailtrap.io/wp-content/uploads/2018/11/cropped-512px-mailtrap-logo-1.png","format":"json-ld"},{"name":"Organization.sameAs","present":false,"format":"json-ld"},{"name":"Organization.contactPoint","present":false,"format":"json-ld"},{"name":"Organization.telephone","present":false,"format":"json-ld"},{"name":"Organization.email","present":false,"format":"json-ld"},{"name":"Organization.address","present":false,"format":"json-ld"}]FAILCheck sameAs or contact evidence actual=0 expected=">= 1" sameAsCount=0 contactSignalCount=0 fields=[{"name":"Organization.logo","present":true,"value":"https://mailtrap.io/wp-content/uploads/2018/11/cropped-512px-mailtrap-logo-1.png","format":"json-ld"},{"name":"Organization.sameAs","present":false,"format":"json-ld"},{"name":"Organization.contactPoint","present":false,"format":"json-ld"},{"name":"Organization.telephone","present":false,"format":"json-ld"},{"name":"Organization.email","present":false,"format":"json-ld"},{"name":"Organization.address","present":false,"format":"json-ld"}]WARNOrganization trust fields are partially complete
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
GEO: Source and trust signals
GEO: Source and trust signals scored 67/100 and needs improvement.
4 Warning
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
GEO: Source and trust signals
GEO: Source and trust signals scored 67/100 and needs improvement.
Needs attention
GEO: Source and trust signals
Issue
Missing source or trust signals: authorOrOwner, entityLinks.
Details
Why it matters
Generative answer systems work best with visible, self-contained, evidence-backed content, clear entities, trustworthy attribution, structured page sections, and crawler-accessible HTML. These signals improve machine understanding even though they do not guarantee AI citations.
Check name
GEO: Source and trust signals
Score
67/100
Status
warning
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content easy for AI answer engines to extract, cite, and attribute without promising inclusion in any proprietary answer surface.
Result
GEO: Source and trust signals scored 67/100 and needs improvement.
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AEO: Question and answer structure
AEO: Question and answer structure scored 73/100 and needs improvement.
3 Warning
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AEO: Question and answer structure
AEO: Question and answer structure scored 73/100 and needs improvement.
Needs attention
AEO: Question and answer structure
Issue
Heading structure issues were detected.
Details
Why it matters
Answer engines need visible answer passages, clear question and heading structure, entity definitions, evidence, and trust signals. These signals improve extraction and attribution, but they do not guarantee answer-engine citations or search features.
Check name
AEO: Question and answer structure
Score
73/100
Status
warning
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content easy for answer engines and assistants to extract, answer from, and attribute without promising inclusion in any proprietary answer surface.
Result
AEO: Question and answer structure scored 73/100 and needs improvement.
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AIO: Page experience proxy
AIO: Page experience proxy scored 80/100 and needs improvement.
3 Warning
GEO, AIO and AEOGEO, AIO & AEOEmerging recommendation
AIO: Page experience proxy
AIO: Page experience proxy scored 80/100 and needs improvement.
Needs attention
AIO: Page experience proxy
Issue
2 image(s) are missing width/height attributes. 22 possible modal/interstitial element(s) detected.
Details
Why it matters
Google AI Overviews and AI Mode depend on normal Google Search eligibility, snippet permissions, useful visible content, consistent structured data, trust signals, and page experience basics. These signals help Google understand and preview a page, but they do not guarantee selection.
Check name
AIO: Page experience proxy
Score
80/100
Status
warning
Category
GEO, AIO & AEO
Maturity
Emerging recommendation
Goal
Make page content eligible, understandable, and previewable for Google Search AI features without promising inclusion.
Result
AIO: Page experience proxy scored 80/100 and needs improvement.
AI DiscoverabilityDiscoverabilityEstablished
IndexNow key
IndexNow key is informational for this page.
Informational
AI DiscoverabilityDiscoverabilityEstablished
IndexNow key
IndexNow key is informational for this page.
Needs attention
IndexNow key
Issue
IndexNow key is informational for this page.
Why it matters
IndexNow lets sites notify participating search engines about changed URLs, but ownership verification requires a UTF-8 key file whose filename matches the key.
Check name
IndexNow key
Score
100/100
Status
informational
Category
Discoverability
Maturity
Established
Goal
Verify that IndexNow ownership key placement is detectable when the site advertises it.
Result
IndexNow key is informational for this page.
Validation steps
Find advertised IndexNow key location
No IndexNow key location was advertised in HTML, Link headers, or robots.txt.
Fetch and validate IndexNow key file
No discoverable IndexNow key file was found.
Evidence log2 steps · 10 lines
Find advertised IndexNow key location [informational]! No IndexNow key location was advertised in HTML, Link headers, or robots.txt.INFOFind advertised IndexNow key locationINFOLook for IndexNow key hints in HTML, Link headers, and robots.txt supportedHints=["robots.txt IndexNow-Key","rel=indexnow-key","meta name=indexnow-key-location"]PASSCompare advertised key location count actual=0 expected="> 0"WARNNo IndexNow key location was advertised in HTML, Link headers, or robots.txt.Fetch and validate IndexNow key file [informational]! No discoverable IndexNow key file was found.INFOFetch and validate IndexNow key fileINFOLook for IndexNow key hints in HTML, Link headers, and robots.txt supportedHints=["robots.txt IndexNow-Key","rel=indexnow-key","meta name=indexnow-key-location"]PASSCompare advertised key location count actual=0 expected="> 0"INFOFetch each advertised same-origin key file and validate filename/body matchFAILCompare valid IndexNow key file count actual=0 expected="> 0"WARNNo discoverable IndexNow key file was found.
Performance and AccessibilityAccessibilityBrowser audit
Buttons do not have an accessible name
100 Fail
Performance and AccessibilityAccessibilityBrowser audit
Buttons do not have an accessible name
Check name
Buttons do not have an accessible name
Score
0/100
Status
fail
Device
desktop
Category
Accessibility
Fix guidance
When a button doesn't have an accessible name, screen readers announce it as "button", making it unusable for users who rely on screen readers. [Learn how to make buttons more accessible](https://dequeuniversity.com/rules/axe/4.11/button-name).
References
https://web.dev/learn/accessibility/Evidence
{
"description": "When a button doesn't have an accessible name, screen readers announce it as \"button\", making it unusable for users who rely on screen readers. [Learn how to make buttons more accessible](https://dequeuniversity.com/rules/axe/4.11/button-name)."
}SEOSEOBrowser audit
Links do not have descriptive text
100 Fail
SEOSEOBrowser audit
Links do not have descriptive text
Check name
Links do not have descriptive text
Score
0/100
Status
fail
Device
desktop
Category
SEO
Estimated savings
1 link found
Fix guidance
Descriptive link text helps search engines understand your content. [Learn how to make links more accessible](https://developer.chrome.com/docs/lighthouse/seo/link-text/).
Evidence
{
"description": "Descriptive link text helps search engines understand your content. [Learn how to make links more accessible](https://developer.chrome.com/docs/lighthouse/seo/link-text/).",
"displayValue": "1 link found"
}Performance and AccessibilityPerformanceBrowser audit
Forced reflow
20 Fail
Performance and AccessibilityPerformanceBrowser audit
Forced reflow
Check name
Forced reflow
Score
0/100
Status
fail
Device
desktop
Category
Performance
Fix guidance
A forced reflow occurs when JavaScript queries geometric properties (such as offsetWidth) after styles have been invalidated by a change to the DOM state. This can result in poor performance. Learn more about [forced reflows](https://developer.chrome.com/docs/performance/insights/forced-reflow) and possible mitigations.
References
https://web.dev/learn/performance/Evidence
{
"description": "A forced reflow occurs when JavaScript queries geometric properties (such as offsetWidth) after styles have been invalidated by a change to the DOM state. This can result in poor performance. Learn more about [forced reflows](https://developer.chrome.com/docs/performance/insights/forced-reflow) and possible mitigations."
}Performance and AccessibilityPerformanceBrowser audit
Reduce unused CSS
20 Fail
Performance and AccessibilityPerformanceBrowser audit
Reduce unused CSS
Check name
Reduce unused CSS
Score
0/100
Status
fail
Device
desktop
Category
Performance
Estimated savings
Est savings of 84 KiB
Fix guidance
Reduce unused rules from stylesheets and defer CSS not used for above-the-fold content to decrease bytes consumed by network activity. [Learn how to reduce unused CSS](https://developer.chrome.com/docs/lighthouse/performance/unused-css-rules/).
References
https://web.dev/learn/performance/Evidence
{
"description": "Reduce unused rules from stylesheets and defer CSS not used for above-the-fold content to decrease bytes consumed by network activity. [Learn how to reduce unused CSS](https://developer.chrome.com/docs/lighthouse/performance/unused-css-rules/).",
"displayValue": "Est savings of 84 KiB",
"numericValue": 0
}Performance and AccessibilityPerformanceBrowser audit
Use efficient cache lifetimes
20 Fail
Performance and AccessibilityPerformanceBrowser audit
Use efficient cache lifetimes
Check name
Use efficient cache lifetimes
Score
0/100
Status
fail
Device
desktop
Category
Performance
Estimated savings
Est savings of 487 KiB
Fix guidance
A long cache lifetime can speed up repeat visits to your page. [Learn more about caching](https://developer.chrome.com/docs/performance/insights/cache).
References
https://web.dev/learn/performance/Evidence
{
"description": "A long cache lifetime can speed up repeat visits to your page. [Learn more about caching](https://developer.chrome.com/docs/performance/insights/cache).",
"displayValue": "Est savings of 487 KiB"
}Performance and AccessibilityPerformanceBrowser audit
Improve image delivery
10 Warning
Performance and AccessibilityPerformanceBrowser audit
Improve image delivery
Check name
Improve image delivery
Score
50/100
Status
warning
Device
desktop
Category
Performance
Estimated savings
Est savings of 143 KiB
Fix guidance
Reducing the download time of images can improve the perceived load time of the page and LCP. [Learn more about optimizing image size](https://developer.chrome.com/docs/performance/insights/image-delivery)
References
https://web.dev/learn/performance/Evidence
{
"description": "Reducing the download time of images can improve the perceived load time of the page and LCP. [Learn more about optimizing image size](https://developer.chrome.com/docs/performance/insights/image-delivery)",
"displayValue": "Est savings of 143 KiB"
}Performance and AccessibilityPerformanceBrowser audit
Legacy JavaScript
10 Warning
Performance and AccessibilityPerformanceBrowser audit
Legacy JavaScript
Check name
Legacy JavaScript
Score
50/100
Status
warning
Device
desktop
Category
Performance
Estimated savings
Est savings of 10 KiB
Fix guidance
Polyfills and transforms enable older browsers to use new JavaScript features. However, many aren't necessary for modern browsers. Consider modifying your JavaScript build process to not transpile [Baseline](https://web.dev/articles/baseline-and-polyfills) features, unless you know you must support older browsers. [Learn why most sites can deploy ES6+ code without transpiling](https://developer.chrome.com/docs/performance/insights/legacy-javascript)
References
https://web.dev/learn/performance/Evidence
{
"description": "Polyfills and transforms enable older browsers to use new JavaScript features. However, many aren't necessary for modern browsers. Consider modifying your JavaScript build process to not transpile [Baseline](https://web.dev/articles/baseline-and-polyfills) features, unless you know you must support older browsers. [Learn why most sites can deploy ES6+ code without transpiling](https://developer.chrome.com/docs/performance/insights/legacy-javascript)",
"displayValue": "Est savings of 10 KiB"
}Fix with MCP or CLI
Use this report as the handoff into remediation. Generate a coding-agent prompt with the failing checks attached, or jump to the MCP and CLI setup docs before your next rescan.
Score history
Public scan score over time
Public reports for this website origin. Select any point or report link to open that canonical report.
| Scan date | Score | Readiness | Report |
|---|---|---|---|
| 67/100 | Level 3, Bot-Aware | Current report |