testland/wcag-compliance-reporter
Builds a per-page WCAG 2.2 compliance score report by aggregating output from one or more accessibility scanners (axe-core / pa11y / lighthouse / WAVE / IBM Equal Access), pivoting violations by Success Criterion (1.4.3 contrast, 2.4.7 focus visible, etc.), grouping by conformance level (A / AA / AAA), reporting per-page coverage gaps explicitly (the \"this page wasn't scanned\" failure mode), and emitting both an executive summary and a per-page drill-down. Use after a multi-page accessibility scan - pa11y-ci, axe across a sitemap, lighthouse-batch - when the team needs a shareable conformance report rather than a per-page tool dump.
70
88%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md describes CI aggregation that runs pa11y/axe/lighthouse and then normalizes their JSON outputs (including violation “help/message” and “selector” fields) into an LLM-ingested report, and those tool outputs are derived from outsider-authored web page content/HTML being scanned.
Where we found it
accessibility scanner JSON output (axe/pa11y/lighthouse) containing web-page-derived violation fields (selector, message/help)
content-type · 12 sites
The plugin normalizes accessibility scanner JSON outputs (axe, pa11y, lighthouse) that contain fields derived from outsider-authored web page HTML — specifically violation selectors (CSS selectors from the page DOM) and help/message text — into an LLM-ingested compliance report, creating an indirect prompt injection vector.
- Audited
- Security analysis