typo3-accessibility
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation guides the user to install playwright and axe-core using npm. These are standard and widely recognized libraries for web automation and accessibility testing.
- [COMMAND_EXECUTION]: A custom Node.js script (scripts/wcag22_audit.cjs) is included to facilitate automated audits. The script executes shell commands to launch a Chromium browser and navigate to user-specified URLs. This behavior is expected for a web auditing tool.
- [DYNAMIC_EXECUTION]: The audit script utilizes Playwright's page.evaluate() method to run Axe-core accessibility checks within the browser environment. This is a standard and necessary procedure for performing DOM-based accessibility analysis.
- [INDIRECT_PROMPT_INJECTION]: As an auditing tool, the skill naturally processes content from external websites. While this presents an inherent surface for indirect prompt injection, the skill's instructions focus on interpreting structured data from the audit tool rather than following natural language instructions found on the pages being audited.
Audit Metadata