accesslint-diff
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Uses dynamic context injection to execute a safe
gitcommand that determines the default branch name of the repository. - [EXTERNAL_DOWNLOADS]: Downloads the
@accesslint/cliand@accesslint/chromepackages from the public npm registry usingnpx. These are legitimate, project-specific tools required for the accessibility audits. - [COMMAND_EXECUTION]: Employs standard
gitcommands (such asstash,switch, andrev-parse) to manage local branch states for comparison. The skill includes explicit validation logic for user-provided branch names to prevent command injection or flag-misuse.
Audit Metadata