wp-accessibility-review
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides specific search patterns using the
rg(ripgrep) utility to scan the codebase for accessibility-related patterns (e.g., non-semantic click handlers, missing labels, focus management). These commands are static, limited to project files, and intended for analysis purposes. - [INDIRECT_PROMPT_INJECTION]: As a code review tool, the skill is designed to ingest and process external code provided by the user. This represents a potential surface for indirect prompt injection where instructions could be hidden in the code being reviewed; however, the risk is minimal given the skill's specialized and restricted workflow.
- [SAFE]: The reference files (
references/interactive-a11y-patterns.mdandreferences/semantic-and-form-patterns.md) contain static documentation on accessibility best practices and do not contain executable content or external references.
Audit Metadata