a11y
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx @axe-core/cli@4to run accessibility audits against a local development server. This is a well-known, reputable tool from Deque Systems used specifically for WCAG compliance testing. - [PROMPT_INJECTION]: The skill processes untrusted frontend code (JSX, HTML, TSX), creating a potential surface for indirect prompt injection. However, because the skill's functionality is limited to reading files and reporting violations without executing the audited code or performing external network writes, the risk is minimal and inherent to its primary purpose as a linter.
- [COMMAND_EXECUTION]: The skill uses
Bashto executenpxandgrepcommands. These are standard operations for a code auditing tool and are used here in a restricted manner to perform static and dynamic analysis of the project.
Audit Metadata