wcag-audit
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses a placeholder for user-supplied data in its instructions.
- Ingestion points: The $ARGUMENTS variable in SKILL.md incorporates external data into the agent's instructions.
- Boundary markers: There are no delimiters or instructions to ignore embedded commands within the user input.
- Capability inventory: The skill provides educational guidance and does not include scripts or specific tool calls.
- Sanitization: Input is not escaped or validated.
Audit Metadata