Back to skill

Security audit

Accessibility V2

Security checks for vulnerabilities and agentic risk

Overview

This is a simple accessibility-review skill whose code-editing implication is purpose-aligned and not hidden or overbroad.

Before installing, understand that using this skill may lead the agent to propose or make accessibility-related UI changes; review diffs as usual for code edits, especially contrast and ARIA changes that can affect behavior.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The skill explicitly says it will 'implement improvements', which implies modifying application code or files, but it does not disclose that side effect or require confirmation before making changes. In an agent setting, unclear write behavior can lead to unexpected code modifications, unsafe automated edits, or changes applied to the wrong scope.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

The natural-language instructions and description are presented in German, which may impose a language preference on users without opt-in. The file does not indicate that the skill is region-specific or that another language can be used.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.