skills/rmyndharis/antigravity-skills/accessibility-compliance-accessibility-audit/Gen Agent Trust Hub
accessibility-compliance-accessibility-audit
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and process data from external web pages provided by the user, which presents an attack surface for instructions embedded in target sites to influence agent behavior.
- Ingestion points: External URLs accessed via Puppeteer scripts defined in
resources/implementation-playbook.md. - Boundary markers: Absent; there are no explicit delimiters or instructions to ignore potential commands embedded within the audited page content.
- Capability inventory: The skill utilizes Puppeteer for browser navigation and DOM interaction, network access to reach target sites, and generates HTML reports.
- Sanitization: Absent; the audit logic directly evaluates raw DOM elements and text content from target pages.
- [COMMAND_EXECUTION]: The implementation playbook contains JavaScript and YAML code for executing automated tests via Puppeteer, Axe-core, and CI/CD pipelines. These are legitimate tools for the skill's stated purpose of accessibility auditing.
Audit Metadata