axe-a11y
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access attempts were detected. The skill focuses on documenting and evaluating accessibility testing workflows using reputable open-source tools.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of widely recognized accessibility testing packages, such as
axe-core,pa11y, and@lhci/cli, from the official NPM registry. - [COMMAND_EXECUTION]: Instructions include standard development commands for managing dependencies and executing test suites using Playwright and Cypress. It also references official API endpoints for the WAVE accessibility service.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data derived from scanning external websites, which represents an indirect prompt injection surface. The risk is considered low because the data ingested consists of structured JSON reports from rule-based accessibility engines, rather than arbitrary web content.
Audit Metadata