📦

Audit History

wcag-audit-patterns - 7 audits

Version comparison

Capability and finding changes across audited versions, newest first.

VersionDateResultReview itemsChange vs previous
v7 LatestJul 8, 2026, 12:02 PM No confirmed findings0No capability change
v6 Jul 8, 2026, 12:02 PM No confirmed findings0No capability change
v5 Jul 1, 2026, 01:16 AM 1 confirmed2No capability change
v4 Jan 17, 2026, 08:43 AM No confirmed findings0No capability change
v3 Jan 17, 2026, 08:43 AM No confirmed findings0Network accessExternal commands
v2 Jan 4, 2026, 04:41 PM No confirmed findings0No capability change
v1 Jan 4, 2026, 04:41 PM No confirmed findings0Baseline

Jul 1, 2026, 01:16 AM

Static analysis reported command execution, network, sensitive-key, weak-crypto, reconnaissance, and critical combination patterns. Manual review found the skill is a Markdown WCAG audit guide; the flagged items are fenced examples, accessibility tool commands, example URLs, and accessibility terms, with no executable payload or prompt injection found.

1
Files scanned
509
Lines analyzed
5
Review items
0
False positives ignored

Confirmed security concerns (1)

Low
Static Sensitive And Crypto Hits Are Accessibility Text
The scanner flagged words such as keyboard key handling and WCAG level labels as certificate, key, or weak-crypto indicators. Manual review found no certificates, private keys, encryption code, or cryptographic API usage.
The cited lines are WCAG conformance labels and JavaScript keyboard-event examples. There is no semantic evidence of credential material or weak cryptography.
Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
Documentation Includes Networked CLI Examples
The bash block shows accessibility tools that would contact a target URL if a user chooses to run them. This is legitimate audit guidance, but users should run these commands only against sites they own or are authorized to test.
The commands are visible in a fenced bash example and use known accessibility tooling. Confidence is high that this is benign documentation, but execution would still perform network requests.
Low
Hardcoded URLs Are References Or Placeholders
The URLs are example audit targets and links to accessibility resources. No evidence found that the skill exfiltrates data or directs traffic to suspicious endpoints.
The URLs point to example.com and public accessibility documentation resources. The surrounding context is a resources section and CLI examples, not data collection code.

Risk Factors

⚙️ External commands (1)
🌐 Network access (2)

Detected Patterns

Critical Combination Heuristic Dismissed
Audited by: codex

Jan 17, 2026, 08:43 AM

This is a pure documentation skill containing WCAG 2.2 audit guidance. No executable code, scripts, network calls, file access, or system interactions are present. The skill only contains markdown documentation with checklists and code examples for reference. All 86 static findings are false positives caused by the scanner misinterpreting markdown syntax (code block delimiters flagged as shell execution, section headers flagged as crypto algorithms, accessibility testing references flagged as reconnaissance).

2
Files scanned
685
Lines analyzed
2
Review items
0
False positives ignored
Audited by: claude

Jan 17, 2026, 08:43 AM

This is a pure documentation skill containing WCAG 2.2 audit guidance. No executable code, scripts, network calls, file access, or system interactions are present. The skill only contains markdown documentation with checklists and code examples for reference. All 86 static findings are false positives caused by the scanner misinterpreting markdown syntax (code block delimiters flagged as shell execution, section headers flagged as crypto algorithms, accessibility testing references flagged as reconnaissance).

2
Files scanned
685
Lines analyzed
2
Review items
0
False positives ignored
Audited by: claude

Jan 4, 2026, 04:41 PM

This is a pure documentation skill containing WCAG 2.2 audit guidance. No executable code, scripts, network calls, file access, or system interactions are present. The skill only contains markdown documentation with checklists and code examples for reference.

4
Files scanned
730
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude

Jan 4, 2026, 04:41 PM

This is a pure documentation skill containing WCAG 2.2 audit guidance. No executable code, scripts, network calls, file access, or system interactions are present. The skill only contains markdown documentation with checklists and code examples for reference.

4
Files scanned
730
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude