a11y-audit
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using python3 and npx to run accessibility scanners against local files and remote URLs.
- [EXTERNAL_DOWNLOADS]: The skill triggers the download and execution of well-known accessibility testing packages @axe-core/cli and pa11y via npx.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from website source code or live URLs, which could theoretically contain malicious instructions. 1. Ingestion points: Local files and remote URLs analyzed by the audit scripts. 2. Boundary markers: None. 3. Capability inventory: Execution of python3 and npx tools. 4. Sanitization: Not specified.
Audit Metadata