ibm-a11y-route-scan
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local Python script
scripts/a11y/a11y_scan.pyusinguv run. This is the core functionality for batch-scanning application routes. - [INDIRECT_PROMPT_INJECTION]: The skill processes external JSON files to define navigation routes and browser interaction states (clicks, text entry, etc.), which creates an attack surface for malicious instructions if the input files are compromised.
- Ingestion points: Reads route definitions from
scripts/a11y/a11y_routes.jsonand UI interaction sequences from files provided to the--states-fileargument. - Boundary markers: None; the skill instructions do not define delimiters or specific 'ignore instructions' warnings for the data being processed.
- Capability inventory: Execution of the accessibility scanner script via
uv run, which likely uses a browser automation framework (e.g., Playwright or Selenium) to interact withhttp://localhost:3000. - Sanitization: No explicit sanitization or validation of the selector/action data is described in the skill instructions.
Audit Metadata