Skip to content
skillsafebeta
← Report library
Purpose / Other

Accessibility Skill Security Audit

What the author says it does (original text)

Audit and improve web accessibility following WCAG 2.2 guidelines. Use when asked to "improve accessibility", "a11y audit", "WCAG compliance", "screen reader support", "keyboard navigation", or "make accessible".

Independent security check

Security risks found

Files checked
3
Risks found
2
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.Risks found: 1
Medium risk

Unpinned npm tools are downloaded and executed, with axe installed globally

Source references: 3
What we found

The fallback directly uses `npx lighthouse` and runs `npm install @axe-core/cli -g` without pinning versions, requiring preinstalled tooling, or seeking confirmation before installation. `npx` may download and execute code when the package is absent; a global npm install persistently changes the user's tool environment and may run dependency installation scripts. The evidence does not show that these packages are malicious, but this method gives code-execution trust to whatever package versions resolve at that time.

Why this matters

If a package, dependency, or publishing account is compromised at installation time, its code could read or modify files and access credentials available within the agent's permissions. Even without an attack, the global installation may replace or alter an existing CLI version and affect later projects.

The candidate matches the active fallback workflow: it supplies an unpinned `npx lighthouse` execution command and a global axe CLI installation command. The former may download before execution when absent, while the latter persistently changes the global npm environment; both make executed content depend on supply-chain versions resolved at runtime. The evidence does not show the packages are malicious, but users can restrict network installs, global writes, and install scripts and require pinned, reviewed versions.

SKILL.md:413In the instructionsOpen original file
# Lighthouse accessibility auditnpx lighthouse https://example.com --only-categories=accessibility
Show 2 other places
SKILL.md:416In the instructionsOpen original file
# axe-corenpm install @axe-core/cli -gaxe https://example.com```
SKILL.md:23In the instructionsOpen original file
If the live tools are unavailable, use Lighthouse CLI or axe for automated coverage and complete the same manual checks. Automated tools detect only a subset of accessibility barriers: a score of 100 is not WCAG conformance, and a low score does not replace issue-level evidence.
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.Risks found: 1
Low risk

The install command does not pin a dependency version

Source references: 3
What we found

The installation command does not specify dependency versions. The same command may download different code later, so what you install can differ from what was checked.

Why this matters

A later install may download different code even though the command and this report have not changed.

This is an active fallback testing command, not a warning or negative example. `npx lighthouse` does not pin a version; if the package is absent locally, npx may download and execute the version resolved at that time, changing both audit behavior and the supply-chain code executed. A user can require a pinned version and integrity information, or restrict use to an approved preinstalled Lighthouse.

In the automated-testing fallback, this actively installs an unpinned `@axe-core/cli` globally. Running it persistently changes the user's global npm tool environment and may run installation scripts from the resolved package and dependencies; the source requires neither user confirmation nor version verification. A user can require a pinned project-local dependency or an approved preinstalled tool.

SKILL.md:413In the instructionsOpen original file
# Lighthouse accessibility auditnpx lighthouse https://example.com --only-categories=accessibility
Show 2 other places
SKILL.md:409In the instructionsOpen original file
Prefer a live Lighthouse audit that returns failing rendered nodes directly to the agent. With Chrome DevTools MCP, this is `lighthouse_audit`. Otherwise:
SKILL.md:416In the instructionsOpen original file
# axe-corenpm install @axe-core/cli -gaxe https://example.com
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

8 instruction sections

The Skill's main workflow runs Lighthouse on a rendered page, examines the accessibility tree and keyboard behavior, localizes the relevant component, modifies source code, and repeats verification. Source modification is a live instruction, but it matches the stated purpose of auditing and improving accessibility.

View source
SKILL.md:18In the instructionsOpen original file
1. Run a live Lighthouse Accessibility audit when that capability is available; with Chrome DevTools MCP, use `lighthouse_audit`. Use mobile navigation mode for a general public page or snapshot mode when reloading would lose authenticated or user-created state.2. Use failed audit nodes to localize the relevant component or template instead of searching the whole repository for generic patterns.3. Inspect a rendered accessibility-tree snapshot for names, roles, states, landmarks, and heading structure; with Chrome DevTools MCP, use `take_snapshot`. Exercise the affected flow with the keyboard.4. Fix the source, then re-run the same audit and manual interaction.

When live tools are unavailable, the Skill directs the agent to use Lighthouse CLI or axe. Its test commands access the URL being audited, and the axe route additionally requests a global installation.

View source
SKILL.md:23In the instructionsOpen original file
If the live tools are unavailable, use Lighthouse CLI or axe for automated coverage and complete the same manual checks. Automated tools detect only a subset of accessibility barriers: a score of 100 is not WCAG conformance, and a low score does not replace issue-level evidence.
SKILL.md:411In the instructionsOpen original file
```bash# Lighthouse accessibility auditnpx lighthouse https://example.com --only-categories=accessibility# axe-corenpm install @axe-core/cli -gaxe https://example.com```
Start here · InstructionsSKILL.md
accessibility
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source. 2 more sections are available in the original file.

File reference map

References: 3
Files making referencesReferenced content
Lines show actual file references, not execution order. Select a node to highlight its connections and inspect the files and source locations. Dashed lines include files that still need locating.
Files and check records3 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included
  • references/A11Y-PATTERNS.mdFull text included
  • references/WCAG.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions
  • references/A11Y-PATTERNS.mdSupporting file
  • references/WCAG.mdSupporting file

Operations mentioned in code and instructions

Run commands
SKILL.md:411In the instructionsOpen original file
```bash# Lighthouse accessibility audit
Connect to websites
SKILL.md:413In the instructionsOpen original file
# Lighthouse accessibility auditnpx lighthouse https://example.com --only-categories=accessibility
SKILL.md:417In the instructionsOpen original file
npm install @axe-core/cli -gaxe https://example.com```
SKILL.md:459In the instructionsOpen original file
- [WCAG 2.2 Quick Reference](https://www.w3.org/WAI/WCAG22/quickref/)- [WAI-ARIA Authoring Practices](https://www.w3.org/WAI/ARIA/apg/)
Install extra software packages
SKILL.md:413In the instructionsOpen original file
# Lighthouse accessibility auditnpx lighthouse https://example.com --only-categories=accessibility
SKILL.md:416In the instructionsOpen original file
# axe-corenpm install @axe-core/cli -gaxe https://example.com
Lines read
891
File checksum (to compare versions)
368bd2c47c9deb5a1a5313fde7f3708869638966cf0a02299d5ad6e350910e0f