intopia-web-accessibility

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes two Node.js scripts (scripts/check-colour-contrast.js and scripts/composite-colour.js) designed to be executed by the agent to validate UI color palettes. These scripts perform mathematical calculations (luminance and color blending) based on local JSON input files provided by the user. There is no evidence of these scripts performing network operations, accessing sensitive system files, or executing arbitrary shell commands.
  • [SAFE]: All external URLs referenced in the documentation (README.md, LICENSE) point to trusted developer platforms or well-known services such as GitHub, Creative Commons, and official documentation for AI tools (Claude, Cursor, VS Code). No suspicious remote downloads or obfuscated code patterns were detected.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill instructs the agent to create and read 'palette JSON' files for contrast checking. These files contain only CSS color values (hex, rgb) and do not involve sensitive user data, credentials, or environment variables. The file system access is scoped to the project's own assets and scripts directories.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 09:13 AM
Security Audit — agent-trust-hub — intopia-web-accessibility