a11y-debugging
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a Node.js one-liner to parse and filter Lighthouse audit reports locally. Evidence: The
node -escript inSKILL.mdused to extract failing audits fromreport.jsonwithout loading the full file into context. - [DYNAMIC_EXECUTION]: The skill utilizes the
evaluate_scripttool to execute custom JavaScript logic within the browser context for specialized accessibility checks. Evidence: JavaScript snippets inreferences/a11y-snippets.mdused for measuring tap targets, checking color contrast, and identifying orphaned form inputs. - [EXTERNAL_DOWNLOADS]: The skill references and fetches accessibility documentation from a well-known service (web.dev) to research specific guidelines. Evidence: Instructions in the 'Core Concepts' section of
SKILL.mdfor retrieving raw markdown versions ofweb.devarticles. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from untrusted sources (web page content and browser console messages) while possessing capabilities to interact with and execute scripts on the page. Ingestion points:
list_console_messagesandtake_snapshotinSKILL.md. Boundary markers: The skill does not provide instructions to treat console output or accessibility tree snapshots as untrusted data. Capability inventory: Access toevaluate_script,press_key,take_screenshot, andlighthouse_audit. Sanitization: No sanitization or filtering of external browser data is performed before processing.
Audit Metadata