a11y-audit
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external code and UI definitions for accessibility audits (contrast ratios, ARIA usage, heading structure).
- Ingestion points: The skill audits user-provided code and UI elements as part of its core flow in SKILL.md.
- Boundary markers: No explicit delimiters or instructions to ignore embedded instructions within the audited files are defined.
- Capability inventory: The skill uses tool calls like
uiux_check_contrastand shell utilities such asgrepto inspect the provided content. - Sanitization: There is no mention of sanitization or validation of the input code before it is processed by the auditor agent.
Audit Metadata