a11y-audit
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and run the@axe-core/clipackage. This is a widely recognized and industry-standard tool for accessibility testing. - [COMMAND_EXECUTION]: The skill executes shell commands to perform its audit functions:
- Runs
grepto scan JSX, TSX, and HTML files for static accessibility violations. - Runs
npx @axe-core/cli@4 http://localhost:3000to perform dynamic analysis against a local development server. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests and processes untrusted project source code.
- Ingestion points: Processes
package.jsonand project files with extensions like.html,.jsx,.tsx, and.vueas specified inSKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded content are defined.
- Capability inventory: The agent has the capability to execute shell commands (
grep,npx) and read local files. - Sanitization: No explicit sanitization or filtering of the processed file content is mentioned.
Audit Metadata