accessibility Audit report.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The verify.sh script executes arbitrary npm/pnpm/yarn scripts from the target project's package.json, which could be a security concern if the project is untrusted. However, this is standard practice for dev tooling and the script is read-only by default, so risk is low.
• Quality score needs review
• Permission surface needs review: secrets or environment access, network or browser access
• GitHub adoption: 58 GitHub stars
• Stars/forks activity: 58 stars, 0 forks; issue activity unavailable in current metadata
• Dependency/runtime risk: credential or environment access, external package install surface
• Permission surface: secrets or environment access, network or browser access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.