Cardwall — a wall of agent cards

Failing · 13

• Asset cachingNo caching headers: repeat visits refetch everything
• HSTSVerify that you own this domain to see this finding.
• Content-Security-PolicyVerify that you own this domain to see this finding.
• Clickjacking guardVerify that you own this domain to see this finding.
• Canonical URLNo canonical: duplicate-content risk across URL variants
• Internal linksNo internal links: a dead-end page for crawlers
• llms.txtNo llms.txt: AI crawlers have no quick brief of your site
• Structured dataNo structured data: rich results and AI parsing are harder
• Organization schemaNo JSON-LD to hold an Organization/Product type
• Social previewNo Open Graph tags: shared links look like bare URLs
• Twitter cardNo Twitter card meta
• Privacy policyNo privacy policy linked: a trust and compliance gap
• Contact methodNo visible contact method: visitors can't reach you

Partial · 16

• HTTPS enforcedHTTPS works, but http:// isn't redirected
• Referrer-PolicyVerify that you own this domain to see this finding.
• Permissions-PolicyVerify that you own this domain to see this finding.
• security.txtVerify that you own this domain to see this finding.
• Supabase row-level security (data exposure)Verify that you own this domain to see this finding.
• Description lengthDescription is 55 chars (aim 70–160)
• robots.txt & sitemaprobots.txt present, no sitemap.xml
• Semantic landmarksSome landmarks missing (add main/nav/header/footer)
• Open Graph completenessMissing og:url, og:type, og:description
• Apple touch iconNo apple-touch-icon: ugly when saved to a phone home screen
• Web app manifestNo web app manifest: not installable as a PWA
• Theme colorNo theme-color: the mobile browser chrome stays default
• TermsNo terms of service linked
• Company identityNo copyright or company identity (reads as unfinished)
• Social presenceOnly GitHub linked: one channel is a single point of failure
• Payment pathNo pricing or checkout found. Fine for a plain landing page; add one once you're selling