ibm-a11y-level1-audit
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes automated accessibility tests using
npx playwright test. It also usesuv runto execute a local Python script (scripts/a11y/a11y_scan.py) for route scanning. These actions are limited to standard development and testing workflows. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npxanduv run --with playwright, which triggers the download of the Playwright testing framework and browser binaries. These are fetched from well-known, official package registries and repositories. - [DATA_INGESTION]: The audit workflow involves reading frontend source files and scanning rendered DOM from local routes (e.g.,
http://localhost:3000). This constitutes a data ingestion surface where the agent processes external content to identify WCAG/IBM accessibility violations, but it is restricted to the local development environment.
Audit Metadata