web-accessibility
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies and remediates accessibility issues by ingesting and processing data from external sources like automated scanners and user reports.
- Ingestion points: The skill ingests untrusted data from axe, Lighthouse, Pa11y, Accessibility Insights, and manual QA/user reports (SKILL.md).
- Boundary markers: The instructions lack explicit boundary markers or delimiters to isolate untrusted external data from the agent's primary instructions.
- Capability inventory: The skill environment allows for "Bash", "Read", and "Write" operations, creating a capability surface that could be exploited if malicious instructions are embedded in the ingested data (SKILL.md).
- Sanitization: There is no evidence of sanitization or filtering logic applied to external audit content before processing.
Audit Metadata