color-contrast-auditor

Pass

Audited by Gen Agent Trust Hub on Mar 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides methodologies for using CLI tools such as grep, npx lighthouse, and npx pa11y to perform automated accessibility audits on both local source code and live web URLs.
  • [EXTERNAL_DOWNLOADS]: The skill references external tools and well-known online checkers. It specifically suggests using npx to fetch and run accessibility packages from the npm registry, which is a standard practice for developers.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an inherent ingestion surface as it is designed to read and process external data, including source code files (CSS, JSX, TSX) and user-provided screenshots. While this is necessary for its primary function, it represents a standard vulnerability surface.
  • Ingestion points: Processes local style sheets, component code, and uploaded images for color analysis.
  • Boundary markers: No explicit delimiters or instructions to ignore embedded content are defined in the provided methodology.
  • Capability inventory: The skill is authorized to use Read, Write, Edit, WebFetch, Glob, and Grep tools.
  • Sanitization: No specific input validation or sanitization of the source code content is mentioned beyond filtering for color-related strings using regular expressions.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 5, 2026, 12:35 PM