kb-github-a11y-scanner
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as reference documentation to help agents understand and integrate the GitHub Accessibility Scanner. It does not contain executable code, scripts, or malicious patterns.
- [CREDENTIALS_UNSAFE]: The skill correctly identifies that authentication tokens and passwords should be stored as repository secrets and not hardcoded. No sensitive information or secrets were found in the skill content.
- [EXTERNAL_DOWNLOADS]: References to external code target the official
github/accessibility-scannerrepository, which is a trusted service from a well-known organization. - [COMMAND_EXECUTION]: The skill contains a benign command-line example (
grep) intended for local file discovery of workflow configurations, posing no security risk.
Audit Metadata