kb-web-scanning
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for accessibility auditing. It provides standard CLI commands for
axe-core,capture-website-cli, andplaywright. These are well-known tools from established providers (Deque Systems and Microsoft). - [COMMAND_EXECUTION]: The skill includes shell command snippets for auditing and discovery (e.g.,
npx,curl,grep). These are documented as reference examples for the user/agent and do not involve obfuscation, sensitive file access, or unauthorized network exfiltration. Thecurlcommands are used for legitimate sitemap discovery from user-provided base URLs. - [EXTERNAL_DOWNLOADS]: The skill references standard Node.js packages (
@axe-core/cli,capture-website-cli,playwright). These are widely used, reputable packages from the official NPM registry and do not constitute a supply chain risk in this context.
Audit Metadata