file-upload-accessibility
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze user-provided HTML and component code, which acts as an ingestion point for untrusted data.
- Ingestion points: The
Code Reviewsection inSKILL.mdinstructions the agent to review templates and server-rendered HTML. - Boundary markers: No specific delimiters or warnings to ignore embedded instructions are provided.
- Capability inventory: The skill is restricted to static analysis and reporting; it does not possess capabilities for file writing, network operations, or command execution.
- Sanitization: No sanitization of the input markup is performed before analysis.
- [SAFE]: The skill provides legitimate accessibility guidance based on frontendchecklist.io. No patterns for credential theft, obfuscation, or unauthorized access were identified.
Audit Metadata