agentic‑readiness docs
/
Scan at scale Blog Build one › Run a scan ›
Menu

Scan at scalePages with a broken schema.org Action (potentialAction)

Pages with a broken schema.org Action (potentialAction)

A per-URL report: one row per page that matches, over the pages a crawl reached.

What this report returns

A schema.org potentialAction advertises an operation agents can invoke, e.g. a SearchAction that wires up site search.

A row appears here when any of these is wrong, worst first:

  • Missing TargetThe potentialAction has no target, so agents have no endpoint to call.Fix Add a target EntryPoint with a urlTemplate, e.g. "https://example.com/search?q={search_term_string}".
  • Target Missing EntryPointThe action's target has no usable endpoint; a SearchAction needs an EntryPoint urlTemplate (a bare URL can't carry the query), while other actions accept a bare URL.Fix Give the target an EntryPoint with a urlTemplate.
  • Missing query-inputA SearchAction lacks query-input, so agents don't know what parameter to submit.Fix Add "query-input": "required name=search_term_string", matching the urlTemplate placeholder.
  • Unknown TypeThe potentialAction's "@type" is not a schema.org Action type (those all end in "Action", such as SearchAction or OrderAction), so consumers ignore it.Fix Use a real schema.org Action type.
  • Insecure TargetAn action's target URL is plain http://, so the search or form input an agent submits through it travels unencrypted and can be read or altered. A Lumar bar: schema.org allows any URL.Fix Point the target at the https endpoint, e.g. "urlTemplate": "https://example.com/search?q={search_term_string}".
  • UrlTemplate Missing PlaceholderThe SearchAction's urlTemplate has no {placeholder}, so an agent has nowhere to inject the query value.Fix Include the placeholder, e.g. ?q={search_term_string}, and mirror its name in query-input.

Security checks are provisional; precision has not yet been measured. A clean row is not a security assessment.

The columns it shows

Every defect this technology can carry is a column in the grid, worst first, so nothing is hidden behind a filter you have to know to apply.

  • schema:Action ValidschemaActionValid
  • schema:Action Security Risk DetectedschemaActionSecurityRiskDetected
  • schema:Action FindingsschemaActionFindings
  • schema:Action TypesschemaActionTypes
  • schema:Action Missing TargetschemaActionMissingTarget
  • schema:Action Target Missing EntryPointschemaActionTargetMissingEntryPoint
  • schema:Action Missing query-inputschemaActionMissingQueryInput
  • schema:Action Unknown TypeschemaActionUnknownType
  • schema:Action Insecure TargetschemaActionInsecureTarget
  • schema:Action urlTemplate Missing PlaceholderschemaActionUrlTemplateMissingPlaceholder
  • Ruleset VersionrulesetVersion
  • Security Check StatussecurityCheckStatus
  • Related Security FrameworkssecurityFrameworkReferences

About schema:Action

Declares actions an agent could take from this page.

Read how schema:Action is checked, including the specification it is validated against and a worked correct and broken example.

Running it

This report comes with Agentic Readiness in Lumar and appears on every crawl of any project that has it turned on. See the whole set, or check a single URL with the scanner on this site, which runs the same code with no account.

Get Lumar pricing