Rescan Report
Share Report
Copy Report Link
Export Report
70/100
OVERALL SCORE
Level 3, Bot-Aware
Moderate readiness for AI agents
- AI Discoverability 73 out of 100
- Agent Ease of Use 63 out of 100
- Security & Trust 60 out of 100
- GEO, AIO and AEO 69 out of 100
- SEO 100 out of 100
- Performance 70 out of 100
- Accessibility 87 out of 100
What AI sees of your website
URL Shortener by Zapier Integrations | Connect Your Apps with Zapier
Instantly connect URL Shortener by Zapier with the apps you use everyday. URL Shortener by Zapier integrates with 9,000 other apps on Zapier - it's the easiest way to automate your work.
Next step
Turn this report into a fix workflow
3 failed checks are ready to move into MCP or CLI remediation. Generate a repair prompt, connect the scanner to your coding agent, or open the integration docs before your next rescan.
| Metric | Score | Status | Passed | Failed | Warning | Evidence |
|---|---|---|---|---|---|---|
| AI Discoverability | 73 | Needs work | 36 | 0 | 0 | |
| Discoverability | 67 | Needs work | 8 | 0 | 0 | |
| Content Readiness | 75 | Mostly ready | 23 | 0 | 0 | |
| Bot Access Control | 75 | Mostly ready | 5 | 0 | 0 | |
| Agent Ease of Use | 63 | Needs work | 25 | 3 | 2 | View details |
| API | 70 | Needs work | 10 | 0 | 0 | |
| Auth | 40 | Priority fix | 2 | 2 | 1 | View details |
| MCP | 47 | Priority fix | 4 | 0 | 0 | |
| Skill Discovery | 61 | Needs work | 6 | 1 | 1 | View details |
| Google Agentic Browsing | 100 | Strong | 3 | 0 | 0 | |
| GEO, AIO and AEO | 69 | Needs work | 10 | 0 | 0 | |
| GEO Readiness | Not Applicable | Not Applicable | 3 | 0 | 0 | |
| AIO Readiness | Not Applicable | Not Applicable | 4 | 0 | 0 | |
| AEO Readiness | Not Applicable | Not Applicable | 3 | 0 | 0 | |
| SEO | 100 | Strong | 10 | 0 | 0 | |
| SEO | 100 | Strong | 10 | 0 | 0 | |
| Security & Trust | 60 | Needs work | 14 | 1 | 2 | View details |
| Security & Trust | 60 | Needs work | 14 | 1 | 2 | View details |
| Performance | 70 | Needs work | 14 | 0 | 0 | |
| Performance | 70 | Needs work | 14 | 0 | 0 |
Prioritized recommendations
Issues ranked by score impact
3 items need attention
Agent Ease of UseAuthEmerging recommendation
Auth.md Agent Registration
Auth.md Agent Registration failed at "Validate protected resource metadata".
72 Fail
Agent Ease of UseAuthEmerging recommendation
Auth.md Agent Registration
Auth.md Agent Registration failed at "Validate protected resource metadata".
72 Fail
Needs attention
Auth.md Agent Registration
01
Issue
OAuth Protected Resource Metadata could not be fetched.
Details
02
Why it matters
Human login and signup flows are often opaque to agents. Auth.md gives automated clients a stable registration contract instead of forcing them to scrape docs, automate browser forms, or guess credential flows.
Check name
Auth.md Agent Registration
Score
28/100
Status
fail
Category
Auth
Maturity
Emerging recommendation
Goal
Publish Auth.md v1 metadata so agents can discover how to register, claim a user, and obtain credentials.
Result
Auth.md Agent Registration failed at "Validate protected resource metadata".
Validation steps
Fetch and validate /auth.md
Serve /auth.md as Markdown or text with Auth.md v1 registration guidance, protected-resource metadata discovery, credential types, claim ceremony guidance, and revocation/error handling.
/auth.md is missing or not usable as agent registration guidance
Validate protected resource metadata
OAuth Protected Resource Metadata could not be fetched.
Auth.md protected-resource metadata is missing or incomplete
Validate Auth.md authorization metadata
OAuth authorization-server metadata could not be fetched.
Authorization-server metadata lacks Auth.md v1 fields
Evidence log3 steps · 19 lines
Fetch and validate /auth.md [warning]INFOFetch and validate /auth.mdINFOFetch Auth.md-related resource path="/auth.md" statusCode=200 contentType="text/markdown; charset=utf-8" bytes=2566WARNCompare response Content-Type with expected Auth.md media type actual=true expected=trueWARNCompare Auth.md/OAuth metadata validation result actual=true expected=trueWARNCompare Auth.md content length actual=2376 expected=">= 80 characters"WARNAuth.md validation warning warning="missing agent_verified/user_claimed or claim ceremony guidance"WARNAuth.md step completed with warningsValidate protected resource metadata [fail]! OAuth Protected Resource Metadata could not be fetched.INFOValidate protected resource metadataINFOFetch Auth.md-related resource path="/.well-known/oauth-protected-resource" statusCode=404 contentType="text/html; charset=utf-8" bytes=83702FAILCompare response Content-Type with expected Auth.md media type actual=false expected=trueFAILCompare Auth.md/OAuth metadata validation result actual=false expected=trueFAILAuth.md validation issue issue="OAuth Protected Resource Metadata could not be fetched."FAILOAuth Protected Resource Metadata could not be fetched.Validate Auth.md authorization metadata [fail]! OAuth authorization-server metadata could not be fetched.INFOValidate Auth.md authorization metadataINFOFetch Auth.md-related resource path="/.well-known/oauth-authorization-server" statusCode=404 contentType="text/html; charset=utf-8" bytes=83710FAILCompare response Content-Type with expected Auth.md media type actual=false expected=trueFAILCompare Auth.md/OAuth metadata validation result actual=false expected=trueFAILAuth.md validation issue issue="OAuth authorization-server metadata could not be fetched."FAILOAuth authorization-server metadata could not be fetched.
Security & TrustSecurity & TrustEstablished
Content-Security-Policy
Content-Security-Policy failed at "Evaluate script execution".
35 Fail
Security & TrustSecurity & TrustEstablished
Content-Security-Policy
Content-Security-Policy failed at "Evaluate script execution".
35 Fail
Needs attention
Content-Security-Policy
01
Issue
script-src allows dangerous script schemes: blob:.
Details
02
Why it matters
Content Security Policy reduces the impact of injection bugs by limiting where scripts, styles, frames, forms, and other browser resources can load or execute.
Check name
Content-Security-Policy
Score
65/100
Status
fail
Category
Security & Trust
Maturity
Established
Goal
Constrain browser resource loading and script execution with an enforcing Content-Security-Policy header.
Result
Content-Security-Policy failed at "Evaluate script execution".
Validation steps
Evaluate script execution
script-src allows dangerous script schemes: blob:.
CSP script execution policy is unsafe
Review hardening directives
CSP is missing recommended hardening directives: object-src, base-uri.
CSP hardening directives are missing or weak
Review CSP reporting
CSP does not define a reporting endpoint.
CSP reporting is missing or incomplete
Evidence log3 steps · 12 lines
Evaluate script execution [fail]! script-src allows dangerous script schemes: blob:.INFOEvaluate script executionINFOInspect effective script directive effectiveDirective="script-src" sources=["'self'","'unsafe-inline'","'unsafe-eval'","cdn.zapier.com","accounts.google.com","fast.wistia.com","smartlock.google.com","www.google-analytics.com","tagmanager.google.com","www.googletagmanager.com","zapier.com","cdn.cookielaw.org","blob:","https://js.driftt.com","https://va.vercel-scripts.com","nextplore.vercel.zapier-deployment.com","https://static.ada.support","https://widget.intercom.io","https://js.intercomcdn.com","cdn.optimizely.com","*.optimizely.com","edge.fullstory.com"]FAILCompare script execution posture actual={"hasNonce":false,"hasHash":false,"hasStrictDynamic":false,"hasUnsafeInline":true,"hasUnsafeEval":true,"hasWildcardHost":true,"hasBroadScheme":false,"dangerousSchemes":["blob:"]} expected="constrained script sources without unsafe execution allowances" issue="script-src allows dangerous script schemes: blob:."FAILscript-src allows dangerous script schemes: blob:.Review hardening directives [warning]! CSP is missing recommended hardening directives: object-src, base-uri.INFOReview hardening directivesINFOInspect CSP hardening directives objectSrcFallback=["'self'"] formCount=0WARNCompare recommended hardening coverage actual=["object-src","base-uri"] expected="no missing object-src/base-uri/form-action requirements" issue="CSP is missing recommended hardening directives: object-src, base-uri."WARNCSP is missing recommended hardening directives: object-src, base-uri.Review CSP reporting [warning]! CSP does not define a reporting endpoint.INFOReview CSP reportingINFOInspect CSP reporting directives reportOnlyHeaderPresent=false reportOnlyDirectives=[]WARNCompare violation reporting configuration actual="no reporting endpoint" expected="report-to or report-uri present" issue="CSP does not define a reporting endpoint."WARNCSP does not define a reporting endpoint.
Agent Ease of UseSkill DiscoveryEmerging recommendation
Agent Skills index
Agent Skills index failed at "Validate skill content".
22 Fail
Agent Ease of UseSkill DiscoveryEmerging recommendation
Agent Skills index
Agent Skills index failed at "Validate skill content".
22 Fail
Needs attention
Agent Skills index
01
Issue
Archive contains too many entries.
Details
02
Why it matters
An Agent Skills index lets agents discover task-specific instructions through a small trusted index, then verify and load only the skill artifacts they need.
Check name
Agent Skills index
Score
78/100
Status
fail
Category
Skill Discovery
Maturity
Emerging recommendation
Goal
Publish an Agent Skills discovery index that advertises digest-pinned SKILL.md or archive artifacts.
Result
Agent Skills index failed at "Validate skill content".
Validation steps
Validate skill content
Archive contains too many entries.
Skill artifact content is invalid
Skill content findings
- Archive contains too many entries.
- Archive contains too many entries.
- description does not clearly state when an agent should activate the skill.
- description does not clearly state when an agent should activate the skill.
{ "truncated": true, "omittedCount": 5, "originalCount": 9 }
Review skill artifact security
SKILL.md references external URLs; fetched content is an additional trust boundary (https://zapier.com/sign-up, https://mcp.zapier.com, https://mcp.zapier.com/api/v1/connect, https://zapier.com/mcp, https://docs.zapier.com/mcp/quickstart, https://docs.zapier.com/mcp/clients, https://docs.zapier.com/mcp/usage).
Skill artifacts contain security findings
Agent Skills security findings
- SKILL.md references external URLs; fetched content is an additional trust boundary (https://zapier.com/sign-up, https://mcp.zapier.com, https://mcp.zapier.com/api/v1/connect, https://zapier.com/mcp, https://docs.zapier.com/mcp/quickstart, https://docs.zapier.com/mcp/clients, https://docs.zapier.com/mcp/usage).
- SKILL.md references external URLs; fetched content is an additional trust boundary (https://docs.zapier.com/sdk, https://docs.zapier.com/sdk/quickstart, https://docs.zapier.com/sdk/reference, https://docs.zapier.com/sdk/cli-reference, https://github.com/zapier/sdk).
- SKILL.md references external URLs; fetched content is an additional trust boundary (https://docs.zapier.com/powered-by-zapier/embedding-zapier-mcp/getting-started, https://docs.zapier.com/powered-by-zapier/embedding-zapier-mcp/guides/connecting-your-agent, https://docs.zapier.com/white-label/use-cases/ai-agent-connections).
- SKILL.md references external URLs; fetched content is an additional trust boundary (https://your-api.com/oauth/authorize, https://your-api.com/leads, https://docs.zapier.com/platform/reference/cli-docs, https://docs.zapier.com/platform/build/auth, https://docs.zapier.com/platform/publish/integration-publishing-requirements, https://docs.zapier.com/integrations/build-cli/typescript-integrations).
{ "truncated": true, "omittedCount": 8, "originalCount": 12 }
Evidence log2 steps · 38 lines
Validate skill content [fail]! Archive contains too many entries.INFOValidate skill contentFAILCompare skill artifact content failures actual=0 expected=0 name="zapier-mcp" type="skill-md" url="https://zapier.com/.well-known/agent-skills/zapier-mcp/SKILL.md"WARNSkill content validation warning name="zapier-mcp" warning="description does not clearly state when an agent should activate the skill."FAILCompare skill artifact content failures actual=0 expected=0 name="zapier-sdk" type="skill-md" url="https://zapier.com/.well-known/agent-skills/zapier-sdk/SKILL.md"WARNSkill content validation warning name="zapier-sdk" warning="description does not clearly state when an agent should activate the skill."WARNSkill content validation warning name="zapier-sdk" warning="SKILL.md body lacks obvious workflow, input/output, example, or validation guidance."FAILCompare skill artifact content failures actual=0 expected=0 name="zapier-embed-mcp" type="skill-md" url="https://zapier.com/.well-known/agent-skills/zapier-embed-mcp/SKILL.md"WARNSkill content validation warning name="zapier-embed-mcp" warning="description does not clearly state when an agent should activate the skill."WARNSkill content validation warning name="zapier-embed-mcp" warning="SKILL.md body lacks obvious workflow, input/output, example, or validation guidance."FAILCompare skill artifact content failures actual=0 expected=0 name="zapier-platform-cli" type="skill-md" url="https://zapier.com/.well-known/agent-skills/zapier-platform-cli/SKILL.md"WARNSkill content validation warning name="zapier-platform-cli" warning="description does not clearly state when an agent should activate the skill."WARNSkill content validation warning name="zapier-platform-cli" warning="SKILL.md body lacks obvious workflow, input/output, example, or validation guidance."FAILCompare skill artifact content failures actual=0 expected=0 name="alpaca" type="archive" url="https://connectors-skills.zapier.com/.well-known/agent-skills/alpaca.tar.gz"FAILCompare skill artifact content failures actual=0 expected=0 name="clay" type="archive" url="https://connectors-skills.zapier.com/.well-known/agent-skills/clay.tar.gz"FAILCompare skill artifact content failures actual=1 expected=0 name="dataforseo" type="archive" url="https://connectors-skills.zapier.com/.well-known/agent-skills/dataforseo.tar.gz"FAILSkill content validation failure name="dataforseo" failure="Archive contains too many entries."FAILCompare skill artifact content failures actual=1 expected=0 name="discord" type="archive" url="https://connectors-skills.zapier.com/.well-known/agent-skills/discord.tar.gz"FAILSkill content validation failure name="discord" failure="Archive contains too many entries."FAILCompare skill artifact content failures actual=0 expected=0 name="dropbox" type="archive" url="https://connectors-skills.zapier.com/.well-known/agent-skills/dropbox.tar.gz"FAILCompare skill artifact content failures actual=0 expected=0 name="elevenlabs" type="archive" url="https://connectors-skills.zapier.com/.well-known/agent-skills/elevenlabs.tar.gz"FAILCompare skill artifact content failures actual=0 expected=0 name="google-ads" type="archive" url="https://connectors-skills.zapier.com/.well-known/agent-skills/google-ads.tar.gz"FAILCompare skill artifact content failures actual=0 expected=0 name="google-analytics" type="archive" url="https://connectors-skills.zapier.com/.well-known/agent-skills/google-analytics.tar.gz"FAILArchive contains too many entries.Review skill artifact security [warning]! SKILL.md references external URLs; fetched content is an additional trust boundary (https://zapier.com/sign-up, https://mcp.zapier.com, https://mcp.zapier.com/api/v1/connect, https://zapier.com/mcp, https://docs.zapier.com/mcp/quickstart, https://docs.zapier.com/mcp/clients, https://docs.zapier.com/mcp/usage).INFOReview skill artifact securityFAILCompare security finding count actual=12 expected=0WARNAgent Skills artifact security warning finding="SKILL.md references external URLs; fetched content is an additional trust boundary (https://zapier.com/sign-up, https://mcp.zapier.com, https://mcp.zapier.com/api/v1/connect, https://zapier.com/mcp, https://docs.zapier.com/mcp/quickstart, https://docs.zapier.com/mcp/clients, https://docs.zapier.com/mcp/usage)."WARNAgent Skills artifact security warning finding="SKILL.md references external URLs; fetched content is an additional trust boundary (https://docs.zapier.com/sdk, https://docs.zapier.com/sdk/quickstart, https://docs.zapier.com/sdk/reference, https://docs.zapier.com/sdk/cli-reference, https://github.com/zapier/sdk)."WARNAgent Skills artifact security warning finding="SKILL.md references external URLs; fetched content is an additional trust boundary (https://docs.zapier.com/powered-by-zapier/embedding-zapier-mcp/getting-started, https://docs.zapier.com/powered-by-zapier/embedding-zapier-mcp/guides/connecting-your-agent, https://docs.zapier.com/white-label/use-cases/ai-agent-connections)."WARNAgent Skills artifact security warning finding="SKILL.md references external URLs; fetched content is an additional trust boundary (https://your-api.com/oauth/authorize, https://your-api.com/leads, https://docs.zapier.com/platform/reference/cli-docs, https://docs.zapier.com/platform/build/auth, https://docs.zapier.com/platform/publish/integration-publishing-requirements, https://docs.zapier.com/integrations/build-cli/typescript-integrations)."WARNAgent Skills artifact security warning finding="Archive contains scripts/ entries; clients should not execute scripts by default."WARNAgent Skills artifact security warning finding="Archive contains scripts/ entries; clients should not execute scripts by default."WARNAgent Skills artifact security warning finding="Archive contains scripts/ entries; clients should not execute scripts by default."WARNAgent Skills artifact security warning finding="Archive contains scripts/ entries; clients should not execute scripts by default."WARNAgent Skills artifact security warning finding="Archive contains scripts/ entries; clients should not execute scripts by default."WARNAgent Skills artifact security warning finding="Archive contains scripts/ entries; clients should not execute scripts by default."WARNAgent Skills artifact security warning finding="Archive contains scripts/ entries; clients should not execute scripts by default."WARNAgent Skills artifact security warning finding="Archive contains scripts/ entries; clients should not execute scripts by default."WARNSKILL.md references external URLs; fetched content is an additional trust boundary (https://zapier.com/sign-up, https://mcp.zapier.com, https://mcp.zapier.com/api/v1/connect, https://zapier.com/mcp, https://docs.zapier.com/mcp/quickstart, https://docs.zapier.com/mcp/clients, https://docs.zapier.com/mcp/usage).
Sign in to see 35 other issues and the full report
Create a free account to unlock every issue, evidence details, exports, and higher free limits.
Fix with MCP or CLI
Use this report as the handoff into remediation. Generate a coding-agent prompt with the failing checks attached, or jump to the MCP and CLI setup docs before your next rescan.
Score history