aria-hidden-focus
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill acts as an educational resource and instruction set for accessibility reviews. All external references, such as to W3C standards and frontendchecklist.io, are to reputable and well-known industry sources.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it is designed to analyze external, potentially untrusted markup.
- Ingestion points: The agent is instructed in
SKILL.mdto review rendered HTML, interactive components, and design-system patterns. - Boundary markers:
SKILL.mddoes not specify the use of delimiters or provide instructions to disregard embedded directives within the analyzed markup. - Capability inventory: The logic defined in
SKILL.mdandreferences/rule.mdis restricted to analysis and reporting; it does not include instructions for file system modifications, network requests, or shell command execution. - Sanitization: There are no instructions for sanitizing or filtering the input data before processing.
Audit Metadata