better-accessibility
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing and modifying project source code (HTML, CSS, React components). This process inherently exposes the agent to indirect prompt injection, where an attacker could embed malicious instructions within the project's code comments, labels, or text content that the agent then processes as authoritative.
- Ingestion points: Project files containing UI code and styling (referenced in SKILL.md).
- Boundary markers: The skill does not define specific delimiters or warnings to ignore instructions embedded in the code under review.
- Capability inventory: The agent is instructed to read source files and write fixes into the project's styling system.
- Sanitization: There are no instructions for sanitizing or validating the ingested content before processing.
Audit Metadata