Axe-core Accessibility Testing

Warn

Audited by Socket on Mar 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill is focused on accessibility testing using Playwright and axe-core. I found no evidence of malicious code, credential harvesting, remote command execution, or downloads from untrusted sources. The main operational risk is normal for test suites: formatted DOM content (including potentially sensitive snippets) may end up in logs or CI artifacts if tests run against pages containing sensitive data. Also, the use of .exclude() and .disableRules() can mask real accessibility issues if misused; those exceptions should be documented and reviewed. Overall the skill appears coherent and appropriate for its stated purpose.

Confidence: 85%Severity: 75%
Audit Metadata
Analyzed At
Mar 2, 2026, 06:11 PM
Package URL
pkg:socket/skills-sh/PramodDutta%2Fqaskills%2Faxe-core-accessibility-testing%2F@ac3dad544b6b9b29f26f8b9489fcfe397fea1b6b
Security Audit — socket — Axe-core Accessibility Testing