uiux-accessibility-verification
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No malicious patterns or attempts to override agent safety guidelines were detected. The instructions focus strictly on accessibility verification and provide clear boundaries for the agent's behavior.
- [DATA_EXFILTRATION]: The skill does not perform network operations or access sensitive system files. It includes a specific security control in
references/evidence-contract.mdthat forbids the inclusion of credentials, personal data, or sensitive content in the evidence records. - [COMMAND_EXECUTION]: The skill instructions do not contain shell commands, subprocess calls, or requests to execute arbitrary scripts.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests project-specific documentation (e.g., user flows and screen specs) and writes to verification files, it lacks the high-privilege capabilities required for exploitation. The use of structured templates and explicit constraints on output content effectively manages the injection surface.
- [DYNAMIC_CONTEXT_INJECTION]: No instances of shell command placeholders (
!command) were found in the skill's markdown instructions.
Audit Metadata