seo-a11y-analyzer
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
axe-corecommand-line interface through a provided shell script (scripts/validate-with-axe.sh) to automate accessibility audits of local files or remote URLs. - [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch the@axe-core/clipackage from the official npm registry at runtime. This utilizes a well-known service for its intended diagnostic purpose. - [PROMPT_INJECTION]: The skill processes untrusted user-provided HTML and JavaScript files, which presents an indirect prompt injection surface where instructions hidden in comments or attributes could potentially influence agent behavior during analysis.
- Ingestion points: HTML/JSX/TSX files read by the agent as specified in Step 1 of SKILL.md.
- Boundary markers: None identified in the provided instructions to isolate analyzed content.
- Capability inventory: Shell command execution via the axe-core CLI tool.
- Sanitization: No specific content sanitization or escaping is described before the agent processes the file content.
Audit Metadata