github-a11y-scanner
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an instructional guide for agents to interact with the GitHub Accessibility Scanner (
github/accessibility-scanner). It defines patterns for detecting the scanner's presence and parsing its output. - [SAFE]: No hardcoded credentials or sensitive tokens are present. The documentation correctly instructs the use of repository secrets for authentication and notes the use of fine-grained Personal Access Tokens (PATs).
- [SAFE]: External references are limited to official GitHub repositories and standard accessibility rule sets (axe-core). These are well-known, trusted sources for development tools.
- [SAFE]: The shell commands provided are restricted to read-only search operations (
grep) used to identify workflow configurations within a repository. - [SAFE]: The skill follows best practices for data handling, focusing on structured parsing of GitHub issues and correlation with local scan results without introducing risky dynamic execution or persistence mechanisms.
Audit Metadata