a11y-audit
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Node.js and Python scripts (measure_render.mjs, verify_states.mjs, and contrast.py) stored within a shared internal directory to perform its auditing tasks. These scripts are used to process design files provided in the environment.
- [DYNAMIC_EXECUTION]: The skill uses node and python3 to run internal measurement scripts at runtime. While this involves command execution, the scripts are part of the skill's own tooling for accessibility verification.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it ingests and processes design and UI files for auditing. 1. Ingestion points: UI and design files are read and passed as arguments to the audit scripts. 2. Boundary markers: No explicit delimiters or instructions to ignore embedded content are present. 3. Capability inventory: The skill can read shared local resources and execute internal audit scripts via shell commands. 4. Sanitization: There is no documented sanitization or filtering of the content within the design files being audited.
Audit Metadata