https://ai18n.chat/

Page structure & technical metrics

Words

500

Action candidates

8

Images

0

HTML

4 KB

Copy

Title chars
85long
Meta chars
113
H1
1
H2
6

Action

Primary

立即开始

Forms
0
On-site links
2
Off-site links
0

Security & metadata

HTTPS
yes
HSTS
no
CSP
no
nosniff
no
viewport
yes
Icon
yes
JSON-LD
yes
Analytics
no

Page

Vite / React / shadcn/ui / Tailwind

Scripts
1 ext / 1 inline
Lang
en
Third-party hosts
no

Lighthouse

Simulated mobile · Performance

No measurement available

View details

No Lighthouse measurement available; no scores assigned.

01 / WHAT WORKS

What makes it work

No separate strengths were recorded. See the evidence below.

02 / NEXT STEPS

Where to go next

  1. See the individual checks for further guidance.

03 / DESIGN LANGUAGE

A design system you can reuse

No design tokens were extracted for this report.

04 / EVIDENCE

The detail behind the report

Explore each observation, recommendation and captured record.

Conversion3 observations

Share card is incomplete

High

A blank or generic unfurl on X, Slack, or WeChat wastes the click you already earned. This is distribution, not decoration.

Set og:title, og:description, and a 1200x630 image that matches the live headline.

og:title=yes og:image=no

No human or proof on the page

Medium

A stranger landing on an AI-looking site with no maker, no customer, and no contact will not give you an email.

Add a real name, a real face, a real contact method, or one real customer line.

no about, no first-person, no quote

No analytics on the live page

Medium

If you cannot see who bounced, you cannot tell if the next fix worked. Shipping without a counter is flying blind.

Put Plausible, PostHog, or GA4 on the public pages. One snippet is enough.

no gtag / plausible / posthog / umami
Launch3 observations

No HSTS header

Medium

Without Strict-Transport-Security, a first visit can still be downgraded to http. Browsers will not pin HTTPS.

Set Strict-Transport-Security: max-age=31536000; includeSubDomains at the edge.

strict-transport-security missing

No Content-Security-Policy

A CSP is the standard way to limit script sources. Vibe-coded pages often load anything, including injected scripts.

Start with a report-only CSP, then default-src 'self' and an explicit script-src.

content-security-policy missing

No X-Content-Type-Options

Without nosniff, browsers may interpret a file as a different type than you sent. It is a one-line header.

Set X-Content-Type-Options: nosniff.

x-content-type-options missing
Link preview

05 / MAKE IT HAPPEN

Give your AI a clear next step

Use the improvement prompt for this page, or the design prompt to borrow its visual language. “Recreate” includes references and implementation steps. Paste either into your coding assistant.

Preview full instructions
You are editing an already-shipped page at https://ai18n.chat/. Do not restyle the site from scratch. Do not introduce purple/violet/indigo gradients, Inter as the brand font, three equal feature cards, fake testimonials, fake round stats, or another shadcn default skin.

Current scores: Taste 100/100 (distinct), Conversion 56/100 (maybe), ship risks 0.

Fix only the named issues. Keep the information architecture and the product's actual claims. If social proof is fake, remove it rather than inventing new names.

Issues:
1. [conversion/high] Share card is incomplete
   A blank or generic unfurl on X, Slack, or WeChat wastes the click you already earned. This is distribution, not decoration.
   Fix: Set og:title, og:description, and a 1200x630 image that matches the live headline.

2. [conversion/medium] No human or proof on the page
   A stranger landing on an AI-looking site with no maker, no customer, and no contact will not give you an email.
   Fix: Add a real name, a real face, a real contact method, or one real customer line.

3. [conversion/medium] No analytics on the live page
   If you cannot see who bounced, you cannot tell if the next fix worked. Shipping without a counter is flying blind.
   Fix: Put Plausible, PostHog, or GA4 on the public pages. One snippet is enough.

4. [ship/medium] No HSTS header
   Without Strict-Transport-Security, a first visit can still be downgraded to http. Browsers will not pin HTTPS.
   Fix: Set Strict-Transport-Security: max-age=31536000; includeSubDomains at the edge.

5. [ship/low] No Content-Security-Policy
   A CSP is the standard way to limit script sources. Vibe-coded pages often load anything, including injected scripts.
   Fix: Start with a report-only CSP, then default-src 'self' and an explicit script-src.

6. [ship/low] No X-Content-Type-Options
   Without nosniff, browsers may interpret a file as a different type than you sent. It is a one-line header.
   Fix: Set X-Content-Type-Options: nosniff.

After the edits, the page should still be the same product. It should just look less like a prompt and convert more clearly.