fixing-accessibility
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes external files for audits, creating a surface for indirect prompt injection (Category 8). Ingestion points: /fixing-accessibility command in SKILL.md. Boundary markers: Absent. Capability inventory: Suggests code fixes and executes a local logging script. Sanitization: Absent.
- [PROMPT_INJECTION]: The 'Ignore previous instructions' pattern in references/evals.yaml is a security test case designed to verify that the agent correctly refuses malicious commands.
- [COMMAND_EXECUTION]: The skill uses a decision-feedback-protocol in SKILL.md to execute a local Python script (record_skill_feedback.py) for analytical logging.
Audit Metadata