Axe-core Accessibility Testing
Warn
Audited by Socket on Mar 2, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
This skill is focused on accessibility testing using Playwright and axe-core. I found no evidence of malicious code, credential harvesting, remote command execution, or downloads from untrusted sources. The main operational risk is normal for test suites: formatted DOM content (including potentially sensitive snippets) may end up in logs or CI artifacts if tests run against pages containing sensitive data. Also, the use of .exclude() and .disableRules() can mask real accessibility issues if misused; those exceptions should be documented and reviewed. Overall the skill appears coherent and appropriate for its stated purpose.
Confidence: 85%Severity: 75%
Audit Metadata