skills/helderberto/skills/a11y/Gen Agent Trust Hub

a11y

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx @axe-core/cli@4 to run accessibility audits against a local development server. This is a well-known, reputable tool from Deque Systems used specifically for WCAG compliance testing.
  • [PROMPT_INJECTION]: The skill processes untrusted frontend code (JSX, HTML, TSX), creating a potential surface for indirect prompt injection. However, because the skill's functionality is limited to reading files and reporting violations without executing the audited code or performing external network writes, the risk is minimal and inherent to its primary purpose as a linter.
  • [COMMAND_EXECUTION]: The skill uses Bash to execute npx and grep commands. These are standard operations for a code auditing tool and are used here in a restricted manner to perform static and dynamic analysis of the project.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 10:23 AM