accessibility-review
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to audit external code and web content provided via file paths or URLs, which are untrusted ingestion points.
- Ingestion points: The skill accepts user-supplied files or URLs as arguments for accessibility auditing.
- Boundary markers: The instructions do not include specific delimiters or instructions to ignore embedded prompts within the audited data.
- Capability inventory: The skill uses
Read,Grep,Glob, andBashto analyze source files and execute auditing utilities. - Sanitization: No explicit sanitization or filtering of the ingested content is performed before analysis.
- [EXTERNAL_DOWNLOADS]: The skill references and provides instructions for using standard, well-known accessibility auditing tools and repositories.
- It suggests running
axe-core(viaaxe-core-gems),Lighthouse, andPa11yto perform automated checks. - It includes a reference to the official
axe-core-gemsrepository on GitHub (github.com/dequelabs/axe-core-gems). - [COMMAND_EXECUTION]: The skill provides bash command snippets for the agent to run local auditing tools.
- These commands include
bundle exec rspecfor running system specs andnpxfor executing accessibility CLI tools likelighthouseandpa11y.
Audit Metadata