cognitive-accessibility

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill is strictly instructional, providing guidelines for WCAG 2.2 and COGA compliance. It does not contain any prompt injection attempts or instructions to bypass safety protocols.
  • [SAFE]: No network operations (e.g., curl, wget), hardcoded credentials, or exfiltration patterns were identified. The skill is isolated and does not interact with the host system's sensitive data.
  • [SAFE]: Analysis of the skill body and references found no evidence of obfuscation techniques such as Base64 encoding, zero-width characters, or homoglyphs.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface for untrusted data as it is designed to audit user-provided URLs and content.
  • Ingestion points: Phase 1 (SKILL.md) requests the user to provide a page URL, component, or content block for review.
  • Boundary markers: None; the skill does not use specific delimiters or instructions to ignore embedded commands in the source material.
  • Capability inventory: The skill has no tool access (allowed-tools is not present) and is restricted to outputting a JSON findings report.
  • Sanitization: No validation or sanitization of the input content is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 07:37 PM