Security Audit

claude-dev-suite/claude-dev-suite:skills/accessibility/wcag

github.com/claude-dev-suite/claude-dev-suite

AI SkillCommit 8c8434ef25f0

TRUSTED

Scanned 14 days ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

claude-dev-suite/claude-dev-suite:skills/accessibility/wcag received a trust score of 85/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.

SkillShield's automated analysis identified 1 finding: 0 critical, 1 high, 0 medium, and 0 low severity. Key findings include Excessive Write/Edit Permissions Declared.

The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.

Last analyzed on March 16, 2026 (commit 8c8434ef). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

100%

Static Code Analysis

100%

Dependency Graph

100%

LLM Behavioral Safety

85%

Behavioral Risk Signals

Filesystem Write

1 finding

Excessive Permissions

1 finding

Security Findings1

Severity	Finding	Layer	Location
HIGH	Excessive Write/Edit Permissions Declared The skill declares 'Write' and 'Edit' permissions, which allow it to modify or create files on the user's system. The skill's primary purpose, as described in its manifest and content, is to provide WCAG guidelines, success criteria, and code patterns. While 'Read', 'Grep', and 'Glob' might be justifiable for analyzing existing code for accessibility issues, 'Write' and 'Edit' are highly privileged and are not explicitly justified by the skill's stated function of providing knowledge and guidance. This broad access could be exploited by a malicious prompt to alter or delete user files. Review the necessity of 'Write' and 'Edit' permissions. If the skill is purely informational, these permissions should be removed. If the skill is intended to suggest or apply code changes, consider implementing a more granular permission model or requiring explicit user confirmation for any file modifications. Limit permissions to the absolute minimum required for the skill's intended functionality.	LLM	SKILL.md:1

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/4a98a6fe1f1cf5c2.svg)](https://skillshield.io/report/4a98a6fe1f1cf5c2)