accessibility-auditing
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external web pages, creating a surface for potential indirect prompt injection attacks.
- Ingestion points: Untrusted web data enters the agent context via the
browser_navigateandbrowser_snapshottools described inSKILL.md. - Boundary markers: The workflow does not define explicit delimiters or instructions to ignore commands potentially embedded within the analyzed accessibility tree or HTML.
- Capability inventory: The skill is restricted to browser interaction tools (navigation, snapshotting, and key simulation) and provides recommendations for code modifications.
- Sanitization: There is no evidence of specific sanitization or validation logic being applied to the data retrieved from external web sources.
Audit Metadata