color
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to perform accessibility audits. The provided
contrast.jsscript correctly implements WCAG relative luminance and contrast ratio formulas without any hidden side effects or network operations.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface as it processes untrusted DOM content from arbitrary web pages during audits.\n - Ingestion points:
contrast.jsreads DOM text content, placeholders, and computed styles from the active page.\n - Boundary markers: None present in the reporting instructions.\n
- Capability inventory: Browser evaluation (Runtime.evaluate) and automated reporting.\n
- Sanitization: The script returns structured data (findings and unverified objects) which helps separate data from instructions, and no high-risk capabilities like network writing are utilized to exploit any potential injection.
Audit Metadata