select-name
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains only documentation and instructions for accessibility compliance based on WCAG standards. There is no executable code (Python, Node.js, or Shell) included in the skill package.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to review external HTML markup and interactive components. This represents a potential data ingestion surface where malicious instructions could be embedded in the code being reviewed. However, the skill lacks the capabilities (such as network access or file-writing tools) to facilitate an attack.
- Ingestion points:
SKILL.md(Review the rendered markup and interactive states). - Boundary markers: None present.
- Capability inventory: No dangerous capabilities (file writes, network operations, or subprocess execution) are requested or defined within the skill.
- Sanitization: No specific sanitization or escaping instructions for the reviewed content are provided.
Audit Metadata