github-a11y-scanner
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation guide for integrating with the
github/accessibility-scannerGitHub Action, which is an official tool from a trusted vendor. - [SAFE]: No remote code execution or unauthorized external downloads are present. References to the scanner action are standard for CI/CD workflow documentation.
- [SAFE]: Shell command examples provided (e.g.,
grep,ghsearch patterns) are benign and intended for searching repository configuration or querying the GitHub API. - [SAFE]: Data handling instructions focus on parsing structured GitHub Issue content. While this represents an ingestion surface for external data, the skill describes a normalization process into a structured JSON format, which is a defensive practice.
- [SAFE]: Security-sensitive configurations like tokens and passwords are explicitly described as being handled via repository secrets, adhering to standard security best practices.
Audit Metadata