accessibility-wcag

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data (source code files or web content) to perform accessibility audits, which introduces an indirect prompt injection surface.
  • Ingestion points: Processes external data via the file-path or url arguments defined in the skill frontmatter.
  • Boundary markers: The skill does not explicitly define delimiters or instructions to the agent to disregard instructions embedded within the analyzed content.
  • Capability inventory: The skill's primary purpose is to "Audit and fix" code, implying capabilities for file reading and potential code modification.
  • Sanitization: No specific input validation or sanitization routines are mentioned for the content being audited.
  • [EXTERNAL_DOWNLOADS]: The skill references and provides integration examples for several industry-standard accessibility testing libraries and services.
  • Includes snippets for @axe-core/playwright, jest-axe, and Cypress-axe integrations.
  • Recommends the use of well-known auditing tools including Lighthouse, WAVE, and axe DevTools.
  • [COMMAND_EXECUTION]: The documentation includes automated testing snippets that involve executing test runners (Jest, Playwright, Cypress) which run code to perform DOM analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 09:13 PM
Security Audit — agent-trust-hub — accessibility-wcag