axiom-accessibility
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an automated auditing workflow that ingests and processes untrusted project source code, creating a potential vector for indirect instructions.
- Ingestion points: The
skills/accessibility-auditor.mdfile (Phases 1 and 2) directs the agent to utilizeGlob,Grep, andReadtools to inspect**/*.swiftfiles within the target project. - Boundary markers: The provided auditing instructions do not include specific boundary markers, delimiters, or warnings to ignore instructions embedded within the source code being analyzed.
- Capability inventory: The skill utilizes file system exploration (
Glob), content searching (Grep), and file reading (Read). It also coordinates with other specialized agents such as theaccessibility-auditorandux-flow-auditor. - Sanitization: There are no instructions for sanitizing, escaping, or validating the content retrieved from the project files before it is processed by the AI agent.
Audit Metadata