accessibility-audit
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using
npxto run accessibility auditing tools such as@axe-core/cliandpa11yon specified URLs. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto fetch and run accessibility packages from the public npm registry at runtime. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external web pages or pull requests during audits. While this creates a potential surface for indirect prompt injection, the risk is mitigated by the specific focus on accessibility metadata and the use of specialized auditing tools.
- Ingestion points: Target URLs provided for scanning or PR content for manual review.
- Boundary markers: None explicitly defined in the instructions.
- Capability inventory: Execution of shell commands via
npx(axe-core, pa11y). - Sanitization: Relies on the inherent parsing logic of the recommended auditing tools.
Audit Metadata