{ "url": "https://linkmake.in", "auditedAt": "2026-07-20T23:38:12.807Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete agentic audit of four representative public templates plus a failure route.", "page": { "appType": "mpa", "framework": "Hand-authored server-rendered HTML with inline CSS/JS behind Cloudflare", "notes": "Public URL protection/shortening and monetisation service. Homepage, authentication, contact, policy, and 404 surfaces sampled. DMCA was not separately audited because it is a low-risk legal-content template represented by policy.html." }, "evidenceUsed": [ "screenshot", "dom", "layout-metrics", "evaluate-probe", "trace", "har", "discoverability", "headers", "cookies", "trackers", "secrets", "images", "heap-summary", "lighthouse", "Modern Web Guidance 0.0.172" ], "guidanceConsulted": [ "accessibility", "accessible-error-announcement", "adapt-scrollbar-to-contrast-preferences", "agentic-forms", "agentic-javascript-tools", "autofill-sign-in-form", "break-up-long-tasks", "coordinate-global-events", "css", "css-layout", "dark-mode", "defer-rendering-heavy-content", "deprioritize-background-fetches", "detect-initial-visibility-state", "efficient-background-processing", "faster-spa-view-transitions", "fluid-scaling", "forms", "html", "identify-heavy-scripts", "improve-next-page-load-performance", "improve-text-layout-and-legibility", "interactions-in-complex-layouts", "interactive-content-in-3d-scenes", "move-dom-element-without-losing-state", "navigation-drawer", "optimize-script-priority", "parallax-scroll-effects", "passkey-authentication", "passkey-reauthentication", "performance", "persistent-app-tours", "persistent-toast-notifications", "persistent-top-layer-ui", "position-aware-tooltips", "privacy", "resolution-optimized-pseudo-elements", "same-document-transitions", "scroll-position-aware-elements", "search-hidden-content", "security", "size-aware-styling", "summarizer", "support-global-calendar-systems", "swipe-to-remove", "translator", "validate-input-after-interaction" ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The dark-emulated screenshot is pixel-identical to the default capture; the inline CSS hard-codes light surfaces and declares neither color-scheme nor a dark media query.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Reduced-motion emulation matched and getAnimations() returned an empty list; no non-essential motion or auto-advance exists.", "pathIds": [ "home" ], "artifacts": [ "evidence/motion-probe.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The high-contrast capture remains readable and controls remain visible; contrast defects in the ordinary palette are recorded separately under be-inclusive.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-contrast.png", "evidence/lighthouse-summary.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The DOM/CSS probe found no view-transition rules, while login, policy, and contact are distinct same-origin documents that switch abruptly.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Recon and component inventory across representative pages", "evidence": "No scroll-linked animation or scrollytelling component exists on the representative pages.", "reason": "No scroll-linked animation or scrollytelling component exists on the representative pages.", "pathIds": [ "home", "login", "contact", "policy" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "Recon and component inventory across representative pages", "evidence": "No gesture-driven, swipe, carousel, or scroll-snap interaction exists to assess.", "reason": "No gesture-driven, swipe, carousel, or scroll-snap interaction exists to assess.", "pathIds": [ "home", "login", "contact", "policy" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "not-applicable", "confidence": "high", "method": "Recon and component inventory across representative pages", "evidence": "No sticky or affixed chrome exists; there is no scroll-reactive component to assess.", "reason": "No sticky or affixed chrome exists; there is no scroll-reactive component to assess.", "pathIds": [ "home", "login", "contact", "policy" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Recon and component inventory across representative pages", "evidence": "No tooltip, popover, or anchored menu exists on the sampled pages.", "reason": "No tooltip, popover, or anchored menu exists on the sampled pages.", "pathIds": [ "home", "login", "contact", "policy" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Login, policy, and contact DOM snapshots contain no nav landmark or home link; the login screenshot is an isolated panel.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json", "evidence/policy-desktop.png", "evidence/policy-dom.json" ], "findingIds": [ "F03" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Initial desktop and mobile captures show the primary content immediately with no modal, interstitial, consent wall, or obscuring banner.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/home-mobile.png", "evidence/layout-mobile.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "not-applicable", "confidence": "high", "method": "Recon and component inventory across representative pages", "evidence": "No overlays, disclosures, dialogs, or rich custom controls are present.", "reason": "No overlays, disclosures, dialogs, or rich custom controls are present.", "pathIds": [ "home", "login", "contact", "policy" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The initial viewport is dominated by the link fields and supporting copy; header/footer chrome is compact and no ad panels are present.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The mobile layout primitive measured scrollWidth 390 versus clientWidth 360 (30 px overflow), and the screenshot clips the card at the right edge.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/layout-mobile.json" ], "findingIds": [ "F04" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The platform probe found no container queries; CSS uses one global max-width breakpoint while the same card/form pattern appears at multiple widths.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/contact-mobile.png", "evidence/contact-dom.json", "evidence/contact-flow-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The focus probe reports outline none and no box shadow for all three homepage inputs; footer links are only 16–17 px high.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ], "findingIds": [ "F06" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The first viewport clearly states “Protect your link in just one click” and places the URL fields prominently; the missing completion action is recorded separately.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The homepage presents URL, title, and size inputs but the rendered DOM contains zero forms and no submit button or action; the screenshot ends the card with an empty rule.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ], "findingIds": [ "F07" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The login flow always invokes a blocking alert saying only “This username and password not found”; the primary homepage has no submission state, and the 404 page offers no recovery action.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json", "evidence/404-desktop.png", "evidence/platform-probe.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Trace measured LCP 576 ms, zero long tasks/TBT, and layout measured CLS 0; Lighthouse corroborated LCP 0.8 s, CLS 0, and TBT 10 ms.", "pathIds": [ "home" ], "artifacts": [ "evidence/perf-trace-summary.json", "evidence/lighthouse-summary.json", "evidence/layout-desktop.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Desktop and mobile layout observers recorded CLS 0 and no shifts; the page contains no images.", "pathIds": [ "home" ], "artifacts": [ "evidence/perf-trace-summary.json", "evidence/lighthouse-summary.json", "evidence/layout-desktop.json", "evidence/home-mobile.png", "evidence/layout-mobile.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Trace recorded zero long tasks and 0 ms TBT; Lighthouse measured 10 ms TBT.", "pathIds": [ "home" ], "artifacts": [ "evidence/perf-trace-summary.json", "evidence/lighthouse-summary.json", "evidence/layout-desktop.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Lighthouse reports inefficient cache lifetimes (about 7 KiB potential savings); the HAR records a redirected Cloudflare script request.", "pathIds": [ "home" ], "artifacts": [ "evidence/perf-trace-summary.json", "evidence/lighthouse-summary.json", "evidence/layout-desktop.json", "evidence/network-summary.json", "evidence/network.har" ], "findingIds": [ "F09" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The HAR attributes 166,815 of 184,990 transferred bytes to Google Tag Manager, while Lighthouse estimates 68 KiB of unused JavaScript.", "pathIds": [ "home" ], "artifacts": [ "evidence/network-summary.json", "evidence/network.har", "evidence/lighthouse-summary.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The probe reports empty labels for the textarea and both inputs; visible text is implemented with center/b tags rather than label elements.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Lighthouse scored the color-contrast audit 0; the visual captures show light secondary text and blue links on light surfaces.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-contrast.png", "evidence/lighthouse-summary.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The homepage has no h1–h3 and starts all sections at h4, has no landmarks, and removes focus outlines from form controls.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Screenshots show generally readable 16 px body copy and policy text with comfortable line-height; specific contrast and mobile clipping failures are recorded separately.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/policy-desktop.png", "evidence/policy-dom.json" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The viewport meta sets maximum-scale=1 and user-scalable=no; Lighthouse failed meta-viewport and the mobile layout has 30 px overflow.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/layout-mobile.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F14" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Lighthouse did not report browser console errors or uncaught exceptions during the audited load.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "DOM evidence confirms an HTML doctype and UTF-8 charset; the images primitive found zero images, so aspect-ratio defects are absent.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/images.json" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Lighthouse reports three deprecation warnings; DOM inspection also shows obsolete center and font elements.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The homepage title is only “Linkmake”; login and contact DOM snapshots have no meta description, so titles/descriptions do not uniquely describe each surface.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json", "evidence/contact-mobile.png", "evidence/contact-dom.json", "evidence/contact-flow-probe.json" ], "findingIds": [ "F16" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "All sampled navigation uses real href anchors; robots allows indexing and a viewport meta exists. The scaling restriction is tracked as an accessibility issue.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The platform probe found no canonical link and /sitemap.xml returned 404, despite robots allowing indexing.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The metadata probe found zero Open Graph tags and zero JSON-LD blocks on the homepage.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ], "findingIds": [ "F18" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The headers primitive found no CSP, HSTS, or nosniff header; analytics cookies are not Secure and use SameSite=None for 400 days.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/trackers.json", "evidence/secrets.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Tracker evidence identifies Google Tag Manager and Google Analytics; 90% of transferred bytes are third-party and two 400-day analytics cookies are set on load.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/trackers.json", "evidence/secrets.json", "evidence/network-summary.json", "evidence/network.har" ], "findingIds": [ "F20" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Both Login and Signup links target login.html; submitting any credentials always triggers the same client-side alert, with no passkey or actual authentication path.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Headers evidence reports no clickjacking control, Referrer-Policy, Permissions-Policy, CSP, or HSTS.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/trackers.json", "evidence/secrets.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Discoverability measured 100% raw/rendered content coverage and isJsShell=false; core text and links remain visible without JavaScript.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json", "evidence/discoverability-rendered.png", "evidence/discoverability-crawler.png" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The sampled pages are server-rendered with no custom overlays or async dependencies; no clipping of menus or fragile runtime state was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json", "evidence/discoverability-rendered.png", "evidence/discoverability-crawler.png", "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Recon and component inventory across representative pages", "evidence": "This small public URL service is intrinsically network-dependent and does not claim an installable/offline app experience.", "reason": "This small public URL service is intrinsically network-dependent and does not claim an installable/offline app experience.", "pathIds": [ "home", "login", "contact", "policy" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "A representative missing route returns the default nginx 404 with no site identity, search, home link, retry, or support route.", "pathIds": [ "error" ], "artifacts": [ "evidence/404-desktop.png", "evidence/platform-probe.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "All sampled pages use lang=en, but the CSS probe found no logical properties and source uses physical padding-left/alignment patterns.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/policy-desktop.png", "evidence/policy-dom.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "issues", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Visible content hard-codes “$20”, “$4”, “2024”, and “2025”; no locale-aware formatting or locale selector is exposed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/policy-desktop.png", "evidence/policy-dom.json" ], "findingIds": [ "F25" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon and component inventory across representative pages", "evidence": "No events, schedules, timestamps, or time-zone-sensitive user data appear in the representative surfaces.", "reason": "No events, schedules, timestamps, or time-zone-sensitive user data appear in the representative surfaces.", "pathIds": [ "home", "login", "contact", "policy" ] }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "“Signup” routes to the same login page as “Login”, and every login submission is rejected client-side regardless of credentials.", "pathIds": [ "login" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json" ], "findingIds": [ "F26" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The login error is a generic blocking alert; homepage instructions warn of errors but provide no form submission or inline validation.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json", "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ], "findingIds": [ "F27" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The login probe reports empty autocomplete on username/password; homepage and contact inputs likewise expose no autocomplete tokens.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json", "evidence/contact-mobile.png", "evidence/contact-dom.json", "evidence/contact-flow-probe.json" ], "findingIds": [ "F28" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The homepage promotes earnings, referral bonuses, payout, signup, and login, but signup is not distinct and login never authenticates; no account-management or cancellation path was discoverable.", "pathIds": [ "login" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json" ], "findingIds": [ "F29" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "not-applicable", "confidence": "high", "method": "Recon and component inventory across representative pages", "evidence": "The images primitive found zero images; there are no image/decorative raster assets to optimize.", "reason": "The images primitive found zero images; there are no image/decorative raster assets to optimize.", "pathIds": [ "home", "login", "contact", "policy" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The page itself is a few kilobytes, but automatic analytics and challenge scripts create six additional requests and most transferred bytes without aiding the broken core task.", "pathIds": [ "home" ], "artifacts": [ "evidence/network-summary.json", "evidence/network.har" ], "findingIds": [ "F30" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "The HAR reports 166,815 third-party bytes out of 184,990 total, almost entirely Google Tag Manager; there are no image or media assets.", "pathIds": [ "home" ], "artifacts": [ "evidence/network-summary.json", "evidence/network.har" ], "findingIds": [ "F31" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Recon and component inventory across representative pages", "evidence": "No declared agent-facing intent exists; emerging WebMCP exposure is an opportunity, not an obligation for this simple service.", "reason": "No declared agent-facing intent exists; emerging WebMCP exposure is an opportunity, not an obligation for this simple service.", "pathIds": [ "home", "login", "contact", "policy" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon and component inventory across representative pages", "evidence": "No summarisation, generation, or inference use case appears in this link service, so on-device inference is not applicable.", "reason": "No summarisation, generation, or inference use case appears in this link service, so on-device inference is not applicable.", "pathIds": [ "home", "login", "contact", "policy" ] }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "After ten representative focus/type/clear cycles, heap nodes decreased from 118,165 to 117,972 and self size from 5,014,929 to 5,012,665 bytes; no retained growth signal appeared.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Heap summaries show about 118k nodes and 5.0 MB self size, proportionate to this small page and stable across the repeated interaction.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Direct visual/DOM/objective evidence on representative paths", "evidence": "Total heap node and edge counts did not grow after ten cycles (nodes -193, edges -100), providing no accumulation signal in this interaction window.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F02" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "pass" }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F04", "F05", "F06" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F07", "F08" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F09", "F10" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F11", "F12", "F13", "F14" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F15" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F16", "F17", "F18" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F19", "F20", "F21", "F22" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F23" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F24", "F25" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F26", "F27", "F28", "F29" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F30", "F31" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "No declared agent-facing intent exists; emerging WebMCP exposure is an opportunity, not an obligation for this simple service. No summarisation, generation, or inference use case appears in this link service, so on-device inference is not applicable." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Homepage and advertised link-protection journey; primary product template and core task.", "url": "https://linkmake.in/", "conditions": [ "desktop 1440x900", "mobile 360x800", "prefers-color-scheme: dark", "prefers-contrast: more", "prefers-reduced-motion: reduce", "keyboard focus", "no-JS crawler" ], "result": "issues" }, { "id": "login", "description": "Login/signup destination; representative authentication and account flow.", "url": "https://linkmake.in/login.html", "conditions": [ "desktop 1440x900", "invalid credentials" ], "result": "issues" }, { "id": "contact", "description": "Contact form; representative secondary form and support journey.", "url": "https://linkmake.in/contact.html", "conditions": [ "mobile 360x800", "DOM/form semantics" ], "result": "issues" }, { "id": "policy", "description": "Privacy policy; representative long-form/legal content template.", "url": "https://linkmake.in/policy.html", "conditions": [ "desktop 1440x900" ], "result": "issues" }, { "id": "error", "description": "Unknown route; representative HTTP/network recovery state.", "url": "https://linkmake.in/404-audit-test", "conditions": [ "desktop 1440x900" ], "result": "issues" } ], "findings": [ { "id": "F01", "severity": "medium", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "confidence": "high", "summary": "The public pages ignore the user’s dark theme preference.", "evidence": "The dark-emulated screenshot is pixel-identical to the default capture; the inline CSS hard-codes light surfaces and declares neither color-scheme nor a dark media query.", "suggestedFix": "Declare color-scheme and supply preference-driven light/dark tokens with sufficient contrast.", "artifacts": [ "evidence/home-dark.png", "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F02", "severity": "low", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "confidence": "medium", "summary": "Navigation and state changes have no transition treatment.", "evidence": "The DOM/CSS probe found no view-transition rules, while login, policy, and contact are distinct same-origin documents that switch abruptly.", "suggestedFix": "Add progressive cross-document View Transitions for same-origin navigation, with reduced-motion handling.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F03", "severity": "medium", "principleId": "provide-guided-navigation", "principleCheckId": "directs-attention", "guidanceId": "navigation-drawer", "confidence": "high", "summary": "Standalone pages provide no orientation or route back to the service.", "evidence": "Login, policy, and contact DOM snapshots contain no nav landmark or home link; the login screenshot is an isolated panel.", "suggestedFix": "Add a consistent semantic header/nav with current-page context and a clear route home.", "artifacts": [ "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json", "evidence/policy-desktop.png", "evidence/policy-dom.json" ], "pathId": "login", "url": "https://linkmake.in/login.html", "effort": "small" }, { "id": "F04", "severity": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "confidence": "high", "summary": "The homepage overflows horizontally on a 360 px viewport.", "evidence": "The mobile layout primitive measured scrollWidth 390 versus clientWidth 360 (30 px overflow), and the screenshot clips the card at the right edge.", "suggestedFix": "Use border-box sizing and intrinsic/fluid widths so padded 100% containers and controls stay within the viewport.", "artifacts": [ "evidence/home-mobile.png", "evidence/layout-mobile.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F05", "severity": "low", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "confidence": "medium", "summary": "Reusable cards and controls only react to the viewport, not their available container.", "evidence": "The platform probe found no container queries; CSS uses one global max-width breakpoint while the same card/form pattern appears at multiple widths.", "suggestedFix": "Give reusable form/card wrappers an inline-size container and adapt child spacing/type with @container where reuse requires it.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/contact-mobile.png", "evidence/contact-dom.json", "evidence/contact-flow-probe.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "medium" }, { "id": "F06", "severity": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "confidence": "high", "summary": "Keyboard focus is removed from the primary inputs.", "evidence": "The focus probe reports outline none and no box shadow for all three homepage inputs; footer links are only 16–17 px high.", "suggestedFix": "Use a strong :focus-visible ring and increase compact link hit areas without removing native focus.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F07", "severity": "critical", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "confidence": "high", "summary": "The advertised link-protection task cannot be completed.", "evidence": "The homepage presents URL, title, and size inputs but the rendered DOM contains zero forms and no submit button or action; the screenshot ends the card with an empty rule.", "suggestedFix": "Wrap the fields in a real form, provide a clearly labelled submit control, validate the URL/name format, and return a usable protected-link result.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F08", "severity": "high", "principleId": "support-core-task-success", "principleCheckId": "clear-system-state-and-recovery", "guidanceId": "accessible-error-announcement", "confidence": "high", "summary": "Failure and recovery states are absent or non-actionable.", "evidence": "The login flow always invokes a blocking alert saying only “This username and password not found”; the primary homepage has no submission state, and the 404 page offers no recovery action.", "suggestedFix": "Provide inline, accessible status regions and specific retry/back/home actions for form, auth, and HTTP error states.", "artifacts": [ "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json", "evidence/404-desktop.png", "evidence/platform-probe.json" ], "pathId": "login", "url": "https://linkmake.in/login.html", "effort": "small" }, { "id": "F09", "severity": "low", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "confidence": "high", "summary": "Delivery is fast but cache and dependency hygiene can improve.", "evidence": "Lighthouse reports inefficient cache lifetimes (about 7 KiB potential savings); the HAR records a redirected Cloudflare script request.", "suggestedFix": "Set useful cache lifetimes for stable assets and avoid avoidable redirect/dependency hops.", "artifacts": [ "evidence/perf-trace-summary.json", "evidence/lighthouse-summary.json", "evidence/layout-desktop.json", "evidence/network-summary.json", "evidence/network.har" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F10", "severity": "medium", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "confidence": "high", "summary": "Third-party JavaScript dominates this tiny page and is mostly unused.", "evidence": "The HAR attributes 166,815 of 184,990 transferred bytes to Google Tag Manager, while Lighthouse estimates 68 KiB of unused JavaScript.", "suggestedFix": "Remove analytics if it does not support a defined need, or load a smaller, consent-aware analytics path after interaction/idle.", "artifacts": [ "evidence/network-summary.json", "evidence/network.har", "evidence/lighthouse-summary.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F11", "severity": "high", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "confidence": "high", "summary": "The primary inputs have no programmatic labels and the page lacks semantic landmarks.", "evidence": "The probe reports empty labels for the textarea and both inputs; visible text is implemented with center/b tags rather than label elements.", "suggestedFix": "Associate each control with a real label and organize the page with header, nav, main, and footer landmarks.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F12", "severity": "high", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "confidence": "high", "summary": "Text contrast fails automated accessibility testing.", "evidence": "Lighthouse scored the color-contrast audit 0; the visual captures show light secondary text and blue links on light surfaces.", "suggestedFix": "Adjust text/link color tokens to meet WCAG AA in every theme and verify with automated and visual checks.", "artifacts": [ "evidence/home-contrast.png", "evidence/lighthouse-summary.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F13", "severity": "high", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "confidence": "high", "summary": "Heading and focus structure is not logical.", "evidence": "The homepage has no h1–h3 and starts all sections at h4, has no landmarks, and removes focus outlines from form controls.", "suggestedFix": "Use one descriptive h1, a sequential heading hierarchy, semantic landmarks, and visible focus styles.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F14", "severity": "high", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "fluid-scaling", "confidence": "high", "summary": "The homepage prevents user scaling and fails narrow reflow.", "evidence": "The viewport meta sets maximum-scale=1 and user-scalable=no; Lighthouse failed meta-viewport and the mobile layout has 30 px overflow.", "suggestedFix": "Remove scaling restrictions and fix intrinsic sizing so content reflows at zoom and narrow widths.", "artifacts": [ "evidence/home-mobile.png", "evidence/layout-mobile.json", "evidence/lighthouse-summary.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F15", "severity": "medium", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "confidence": "high", "summary": "Deprecated platform usage remains on the page.", "evidence": "Lighthouse reports three deprecation warnings; DOM inspection also shows obsolete center and font elements.", "suggestedFix": "Replace obsolete presentational markup with semantic HTML and CSS, then resolve each DevTools deprecation warning.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/lighthouse-summary.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F16", "severity": "medium", "principleId": "be-discoverable", "principleCheckId": "title-and-description", "guidanceId": "html", "confidence": "high", "summary": "Metadata is generic or missing across representative pages.", "evidence": "The homepage title is only “Linkmake”; login and contact DOM snapshots have no meta description, so titles/descriptions do not uniquely describe each surface.", "suggestedFix": "Write a unique descriptive title and concise meta description for each public route.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json", "evidence/contact-mobile.png", "evidence/contact-dom.json", "evidence/contact-flow-probe.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F17", "severity": "medium", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "confidence": "high", "summary": "Canonical and sitemap signals are missing.", "evidence": "The platform probe found no canonical link and /sitemap.xml returned 404, despite robots allowing indexing.", "suggestedFix": "Publish canonical URLs and an XML sitemap covering the public routes, and reference it from robots.txt.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F18", "severity": "low", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "confidence": "high", "summary": "The public service has no social-preview or structured entity metadata.", "evidence": "The metadata probe found zero Open Graph tags and zero JSON-LD blocks on the homepage.", "suggestedFix": "Add accurate Open Graph metadata and appropriate schema.org Organization/WebSite or WebApplication JSON-LD.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F19", "severity": "high", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "confidence": "high", "summary": "HTTPS is present, but transport/header and cookie defaults are unsafe.", "evidence": "The headers primitive found no CSP, HSTS, or nosniff header; analytics cookies are not Secure and use SameSite=None for 400 days.", "suggestedFix": "Deploy HSTS, a restrictive CSP, nosniff, and Secure/Lax cookies with proportionate lifetimes.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/trackers.json", "evidence/secrets.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F20", "severity": "high", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "confidence": "high", "summary": "Analytics runs immediately without an evident consent or minimisation mechanism.", "evidence": "Tracker evidence identifies Google Tag Manager and Google Analytics; 90% of transferred bytes are third-party and two 400-day analytics cookies are set on load.", "suggestedFix": "Justify and disclose collection, gate non-essential analytics on consent, shorten retention, and prefer minimal first-party measurement.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/trackers.json", "evidence/secrets.json", "evidence/network-summary.json", "evidence/network.har" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F21", "severity": "high", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkey-authentication", "confidence": "high", "summary": "The authentication surface is a non-functional password-only dead end.", "evidence": "Both Login and Signup links target login.html; submitting any credentials always triggers the same client-side alert, with no passkey or actual authentication path.", "suggestedFix": "Implement real server-backed authentication, separate sign-up, correct autocomplete, and offer passkeys/WebAuthn.", "artifacts": [ "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json" ], "pathId": "login", "url": "https://linkmake.in/login.html", "effort": "large" }, { "id": "F22", "severity": "high", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "confidence": "high", "summary": "Browser-enforced defensive policies are absent.", "evidence": "Headers evidence reports no clickjacking control, Referrer-Policy, Permissions-Policy, CSP, or HSTS.", "suggestedFix": "Add frame-ancestors (or X-Frame-Options), Referrer-Policy, Permissions-Policy, HSTS, and a nonce/hash-based CSP.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/trackers.json", "evidence/secrets.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F23", "severity": "medium", "principleId": "be-resilient", "principleCheckId": "network-and-http-failure-states", "guidanceId": "persistent-toast-notifications", "confidence": "high", "summary": "HTTP failures do not preserve context or support recovery.", "evidence": "A representative missing route returns the default nginx 404 with no site identity, search, home link, retry, or support route.", "suggestedFix": "Serve a branded, lightweight error document with a home link and actionable recovery guidance.", "artifacts": [ "evidence/404-desktop.png", "evidence/platform-probe.json" ], "pathId": "error", "url": "https://linkmake.in/404-audit-test", "effort": "small" }, { "id": "F24", "severity": "low", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "confidence": "medium", "summary": "The English language is declared, but layout CSS is not writing-mode resilient.", "evidence": "All sampled pages use lang=en, but the CSS probe found no logical properties and source uses physical padding-left/alignment patterns.", "suggestedFix": "Retain correct lang and migrate layout edges to logical properties; set dir where content language requires it.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/policy-desktop.png", "evidence/policy-dom.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F25", "severity": "low", "principleId": "be-internationalised", "principleCheckId": "locale-aware-data", "guidanceId": "support-global-calendar-systems", "confidence": "medium", "summary": "Commercial values and dates are hard-coded rather than locale-aware.", "evidence": "Visible content hard-codes “$20”, “$4”, “2024”, and “2025”; no locale-aware formatting or locale selector is exposed.", "suggestedFix": "Format currency and dates from structured values with Intl and document the supported locale strategy.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/policy-desktop.png", "evidence/policy-dom.json" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "medium" }, { "id": "F26", "severity": "high", "principleId": "be-trustworthy", "principleCheckId": "no-dark-patterns", "guidanceId": "forms", "confidence": "high", "summary": "Navigation labels promise capabilities that are not delivered.", "evidence": "“Signup” routes to the same login page as “Login”, and every login submission is rejected client-side regardless of credentials.", "suggestedFix": "Remove misleading actions until they work, or implement distinct, honest signup/login flows and clear service availability.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json" ], "pathId": "login", "url": "https://linkmake.in/login.html", "effort": "small" }, { "id": "F27", "severity": "high", "principleId": "be-trustworthy", "principleCheckId": "humane-error-handling", "guidanceId": "accessible-error-announcement", "confidence": "high", "summary": "Form errors are not humane or accessible.", "evidence": "The login error is a generic blocking alert; homepage instructions warn of errors but provide no form submission or inline validation.", "suggestedFix": "Validate after interaction, connect field errors with aria-describedby/aria-invalid, and announce a specific summary in a live region.", "artifacts": [ "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json", "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json" ], "pathId": "login", "url": "https://linkmake.in/login.html", "effort": "small" }, { "id": "F28", "severity": "medium", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-in-form", "confidence": "high", "summary": "Inputs omit autocomplete assistance.", "evidence": "The login probe reports empty autocomplete on username/password; homepage and contact inputs likewise expose no autocomplete tokens.", "suggestedFix": "Add username/current-password, name, email, url, and other appropriate autocomplete/inputmode tokens.", "artifacts": [ "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json", "evidence/contact-mobile.png", "evidence/contact-dom.json", "evidence/contact-flow-probe.json" ], "pathId": "login", "url": "https://linkmake.in/login.html", "effort": "small" }, { "id": "F29", "severity": "high", "principleId": "be-trustworthy", "principleCheckId": "safe-commercial-and-account-flows", "guidanceId": "passkey-reauthentication", "confidence": "high", "summary": "Account and earning claims lack a usable, reversible account journey.", "evidence": "The homepage promotes earnings, referral bonuses, payout, signup, and login, but signup is not distinct and login never authenticates; no account-management or cancellation path was discoverable.", "suggestedFix": "Only advertise operational account features, provide clear signup/login/account-management journeys, and disclose commitments and reversal paths.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json", "evidence/platform-probe.json", "evidence/login-desktop.png", "evidence/login-dom.json", "evidence/login-flow-probe.json" ], "pathId": "login", "url": "https://linkmake.in/login.html", "effort": "large" }, { "id": "F30", "severity": "low", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "efficient-background-processing", "confidence": "high", "summary": "Background analytics work is disproportionate to the page’s functionality.", "evidence": "The page itself is a few kilobytes, but automatic analytics and challenge scripts create six additional requests and most transferred bytes without aiding the broken core task.", "suggestedFix": "Defer or remove non-essential background work and measure only events tied to a documented product need.", "artifacts": [ "evidence/network-summary.json", "evidence/network.har" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" }, { "id": "F31", "severity": "medium", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "deprioritize-background-fetches", "confidence": "high", "summary": "The third-party budget is disproportionate for a static form page.", "evidence": "The HAR reports 166,815 third-party bytes out of 184,990 total, almost entirely Google Tag Manager; there are no image or media assets.", "suggestedFix": "Set a strict third-party byte/request budget and replace or defer analytics until it provides clear user value.", "artifacts": [ "evidence/network-summary.json", "evidence/network.har" ], "pathId": "home", "url": "https://linkmake.in/", "effort": "small" } ], "taskList": [ { "id": "T01", "title": "Restore an end-to-end protected-link creation flow", "priority": 1, "findingIds": [ "F07" ], "guidanceId": "forms", "status": "open" }, { "id": "T02", "title": "Implement honest, functional signup/login and account journeys", "priority": 2, "findingIds": [ "F21", "F26", "F29" ], "guidanceId": "passkey-authentication", "status": "open" }, { "id": "T03", "title": "Repair labels, landmarks, headings, focus, contrast, zoom and reflow", "priority": 3, "findingIds": [ "F04", "F06", "F11", "F12", "F13", "F14" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T04", "title": "Deploy security headers and safe cookie defaults", "priority": 4, "findingIds": [ "F19", "F22" ], "guidanceId": "security", "status": "open" }, { "id": "T05", "title": "Minimise and consent-gate analytics", "priority": 5, "findingIds": [ "F10", "F20", "F30", "F31" ], "guidanceId": "privacy", "status": "open" }, { "id": "T06", "title": "Add humane inline validation and recovery states", "priority": 6, "findingIds": [ "F08", "F23", "F27" ], "guidanceId": "accessible-error-announcement", "status": "open" }, { "id": "T07", "title": "Add preference-driven dark mode", "priority": 7, "findingIds": [ "F01" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T08", "title": "Complete metadata, canonical, sitemap and share previews", "priority": 8, "findingIds": [ "F16", "F17", "F18" ], "guidanceId": "html", "status": "open" }, { "id": "T09", "title": "Add autocomplete and input assistance", "priority": 9, "findingIds": [ "F28" ], "guidanceId": "autofill-sign-in-form", "status": "open" }, { "id": "T10", "title": "Replace obsolete markup and deprecations", "priority": 10, "findingIds": [ "F15" ], "guidanceId": "html", "status": "open" }, { "id": "T11", "title": "Add consistent semantic navigation", "priority": 11, "findingIds": [ "F03" ], "guidanceId": "navigation-drawer", "status": "open" }, { "id": "T12", "title": "Improve locale and component-level adaptability", "priority": 12, "findingIds": [ "F05", "F24", "F25" ], "guidanceId": "size-aware-styling", "status": "open" } ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop audit evidence", "findingIds": [ "F01", "F02", "F05", "F06", "F07", "F11", "F13", "F15", "F16", "F17", "F18", "F24", "F25", "F26", "F27", "F29" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom audit evidence", "findingIds": [ "F01", "F02", "F05", "F06", "F07", "F11", "F13", "F15", "F16", "F17", "F18", "F24", "F25", "F26", "F27", "F29" ] }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "platform probe audit evidence", "findingIds": [ "F01", "F02", "F05", "F06", "F07", "F08", "F11", "F13", "F15", "F16", "F17", "F18", "F23", "F24", "F25", "F26", "F27", "F29" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile audit evidence", "findingIds": [ "F04", "F14" ] }, { "type": "layout", "path": "evidence/layout-mobile.json", "caption": "layout mobile audit evidence", "findingIds": [ "F04", "F14" ] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark audit evidence", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/home-contrast.png", "caption": "home contrast audit evidence", "findingIds": [ "F12" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-summary.json", "caption": "lighthouse summary audit evidence", "findingIds": [ "F09", "F10", "F12", "F14", "F15" ] }, { "type": "trace-summary", "path": "evidence/perf-trace-summary.json", "caption": "perf trace summary audit evidence", "findingIds": [ "F09" ] }, { "type": "layout", "path": "evidence/layout-desktop.json", "caption": "layout desktop audit evidence", "findingIds": [ "F09" ] }, { "type": "har-summary", "path": "evidence/network-summary.json", "caption": "network summary audit evidence", "findingIds": [ "F09", "F10", "F20", "F30", "F31" ] }, { "type": "har", "path": "evidence/network.har", "caption": "network audit evidence", "findingIds": [ "F09", "F10", "F20", "F30", "F31" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "headers audit evidence", "findingIds": [ "F19", "F20", "F22" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies audit evidence", "findingIds": [ "F19", "F20", "F22" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers audit evidence", "findingIds": [ "F19", "F20", "F22" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets audit evidence", "findingIds": [ "F19", "F20", "F22" ] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "discoverability audit evidence", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "discoverability rendered audit evidence", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "discoverability crawler audit evidence", "findingIds": [] }, { "type": "screenshot", "path": "evidence/login-desktop.png", "caption": "login desktop audit evidence", "findingIds": [ "F02", "F03", "F08", "F16", "F21", "F26", "F27", "F28", "F29" ] }, { "type": "dom", "path": "evidence/login-dom.json", "caption": "login dom audit evidence", "findingIds": [ "F02", "F03", "F08", "F16", "F21", "F26", "F27", "F28", "F29" ] }, { "type": "other", "path": "evidence/login-flow-probe.json", "caption": "login flow probe audit evidence", "findingIds": [ "F02", "F03", "F08", "F16", "F21", "F26", "F27", "F28", "F29" ] }, { "type": "screenshot", "path": "evidence/contact-mobile.png", "caption": "contact mobile audit evidence", "findingIds": [ "F05", "F16", "F28" ] }, { "type": "dom", "path": "evidence/contact-dom.json", "caption": "contact dom audit evidence", "findingIds": [ "F05", "F16", "F28" ] }, { "type": "other", "path": "evidence/contact-flow-probe.json", "caption": "contact flow probe audit evidence", "findingIds": [ "F05", "F16", "F28" ] }, { "type": "screenshot", "path": "evidence/policy-desktop.png", "caption": "policy desktop audit evidence", "findingIds": [ "F03", "F24", "F25" ] }, { "type": "dom", "path": "evidence/policy-dom.json", "caption": "policy dom audit evidence", "findingIds": [ "F03", "F24", "F25" ] }, { "type": "screenshot", "path": "evidence/404-desktop.png", "caption": "404 desktop audit evidence", "findingIds": [ "F08", "F23" ] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "heap baseline audit evidence", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-post.heapsnapshot", "caption": "heap post audit evidence", "findingIds": [] }, { "type": "other", "path": "evidence/motion-probe.json", "caption": "motion probe audit evidence", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "lighthouse audit evidence", "findingIds": [] }, { "type": "other", "path": "evidence/images.json", "caption": "images audit evidence", "findingIds": [] } ], "budget": { "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-20T23-38-12-807Z" }