frontend-a11y-check
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell commands for running Playwright tests (
npx playwright test) and Python scripts (python scripts/a11y/a11y_scan.py). These commands are intended for development and testing within the Langflow project structure. - [EXTERNAL_DOWNLOADS]: The skill includes instructions to install the Playwright browser and dependencies using
uv run --with playwright playwright install chromium. This utilizes standard package management for well-known testing tools. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by processing external frontend code and test files. Ingestion points: Files in
src/frontendandtests/a11y. Boundary markers: No explicit delimiters or instructions to ignore code content are used. Capability inventory: The skill uses shell execution (npx,python,uv) and interacts with the file system. Sanitization: No sanitization of the ingested code is specified. This is a low-risk surface inherent to its code analysis purpose.
Audit Metadata