color-contrast-auditor
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides methodologies for using CLI tools such as
grep,npx lighthouse, andnpx pa11yto perform automated accessibility audits on both local source code and live web URLs. - [EXTERNAL_DOWNLOADS]: The skill references external tools and well-known online checkers. It specifically suggests using
npxto fetch and run accessibility packages from the npm registry, which is a standard practice for developers. - [INDIRECT_PROMPT_INJECTION]: The skill has an inherent ingestion surface as it is designed to read and process external data, including source code files (CSS, JSX, TSX) and user-provided screenshots. While this is necessary for its primary function, it represents a standard vulnerability surface.
- Ingestion points: Processes local style sheets, component code, and uploaded images for color analysis.
- Boundary markers: No explicit delimiters or instructions to ignore embedded content are defined in the provided methodology.
- Capability inventory: The skill is authorized to use
Read,Write,Edit,WebFetch,Glob, andGreptools. - Sanitization: No specific input validation or sanitization of the source code content is mentioned beyond filtering for color-related strings using regular expressions.
Audit Metadata