accessibility-testing-en
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]:
- Description: The script
batch_convert_templates.pyuses thesubprocessmodule to execute other local utility scripts (convert_formats.py) to handle batch file conversion tasks. - Evidence:
subprocess.call(cmd)inscripts/batch_convert_templates.py. - [PROMPT_INJECTION]:
- Description: The skill ingests untrusted user requirements to generate accessibility test strategies, creating a surface for indirect prompt injection.
- Ingestion points: User requirements and business context entered during the testing design phase (
prompts/accessibility-testing_EN.md). - Boundary markers: Absent; there are no specific markers or instructions to ignore instructions embedded in the user data.
- Capability inventory: Local file system access and script execution capabilities via the
scripts/directory. - Sanitization: Absent; the skill does not filter or sanitize user input before it is used by the agent for reasoning.
Audit Metadata