ui-a11y
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to perform accessibility audits on local files. It uses standard file system tools (Read, Write, Edit, Grep, Glob) to identify and remediate WCAG 2.2 AA violations such as color contrast, touch target sizes, and semantic HTML usage. No unauthorized network activity, credential harvesting, or obfuscated code was found.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external file content which could theoretically contain malicious instructions. However, the risk is mitigated by the specific context of performing an accessibility audit.
- Ingestion points: The file path provided in $ARGUMENTS and the subsequent reading of its content.
- Boundary markers: None explicitly defined in the instructions.
- Capability inventory: Uses Read, Write, Edit, Grep, and Glob tools to modify project files.
- Sanitization: No specific sanitization or validation of the file content is performed before processing.
Audit Metadata