ibm-a11y-level1-audit
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from source code changes, frontend components, and application routes to generate accessibility reports.
- Ingestion points: Git changes in
src/frontend, application routes, and UI components. - Boundary markers: No specific delimiters or "ignore instructions" prompts are used when reading or scanning the target surfaces.
- Capability inventory: Executes shell commands via
npxanduv, performs file writes for remediation and reporting, and runs Playwright tests. - Sanitization: Content from the scanned surfaces is processed for accessibility violations without explicit sanitization or escaping of embedded instructions.
- [COMMAND_EXECUTION]: The skill executes local development commands including
npx playwright test,npm run a11y:html-report, anduv run python scripts/a11y/a11y_scan.pyto facilitate testing and reporting.
Audit Metadata