Token导航 LogoToken导航TokenDH.com
研究检索操作浏览器github未标认证来源可访问许可证需确认审计提醒

github-a11y-scannerGitHub a11y scanner 搜索

Agent Skill

用于围绕 GitHub 仓库、Issue、Pull Request、分支、提交和代码协作流程提供辅助能力。它适合让 Agent 查询项目状态、整理变更、辅助创建或检查协作事项,并把仓库中的信息转成可执行的下一步。使用时需要区分只读查询和写入操作;涉及创建 PR、修改 Issue、推送分支或访问私有仓库时,应确认 token 权限、目标仓库范围和用户授权。

总安装

2,933

周安装

126

GitHub Stars

256

下载量

1,028
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:github-a11y-scanner(GitHub a11y scanner 搜索)
来源仓库:https://github.com/community-access/accessibility-agents
仓库路径:skills/github-a11y-scanner
安装命令:
npx skills add https://github.com/community-access/accessibility-agents --skill github-a11y-scanner
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/community-access/accessibility-agents --skill github-a11y-scanner

简介

用于围绕 GitHub 仓库、Issue、Pull Request、分支、提交和代码协作流程提供辅助能力。

  • 适合让 Agent 查询项目状态、整理变更、辅助创建或检查协作事项。
  • 通过 npx skills add 命令从指定仓库安装使用。
  • 涉及写入操作时需确认 token 权限和用户授权,区分只读与写操作。
  • 可结合原始 README 进一步了解具体功能和使用方法。

SKILL.md

GitHub Accessibility Scanner Integration

What Is the GitHub Accessibility Scanner?

The GitHub Accessibility Scanner (github/accessibility-scanner@v2) is an official GitHub Action that:

  • Scans live URLs for accessibility barriers using axe-core in a headless browser
  • Creates trackable GitHub Issues for each finding, with affected element, WCAG criterion, and remediation guidance
  • Optionally assigns issues to GitHub Copilot for AI-powered fix suggestions and PR creation
  • Caches results across runs for delta detection (new, fixed, persistent findings)
  • Supports authenticated scanning (login flows, SSO, passkeys via Playwright auth context)
  • Optionally captures screenshots and attaches them to filed issues

Current version: v2 (public preview)

Detecting Scanner Presence

To determine whether a repository has the GitHub Accessibility Scanner configured:

Workflow File Detection

Search for workflow files referencing the scanner action:

# Search in .github/workflows/ for the scanner action reference
grep -rl "github/accessibility-scanner" .github/workflows/

Pattern to match in YAML:

- uses: github/accessibility-scanner@v2

Workflow Inputs

When a scanner workflow is found, extract its configuration:

InputRequiredDescription
urlsYesNewline-delimited list of URLs to scan
repositoryYesRepository (owner/name) where issues and PRs are created
tokenYesFine-grained PAT with write access (contents, issues, PRs, metadata)
cache_keyYesFilename for caching results across runs (e.g., cached_results-mysite.json)
login_urlNoLogin page URL for authenticated scanning
usernameNoUsername for authentication
passwordNoPassword for authentication (via repository secret)
auth_contextNoStringified JSON for complex authentication (Playwright session state)
skip_copilot_assignmentNoSet true to skip assigning issues to Copilot
include_screenshotsNoSet true to capture screenshots (stored on gh-cache branch)

Parsing Scanner-Created Issues

The scanner creates GitHub Issues with a structured format. Agents should parse these fields:

Issue Identification

Scanner-created issues can be identified by:

  1. Author: The GitHub Actions bot that runs the workflow
  2. Labels: The scanner applies labels to categorize findings (typically accessibility-related labels)
  3. Body structure: Issues contain structured sections with violation details

Issue Body Structure

Scanner issues typically contain:

SectionContentAgent Use
Violation titleThe axe-core rule that was violatedMap to help-url-reference for remediation docs
WCAG criterionThe specific WCAG success criterionUsed for severity scoring and compliance mapping
Affected elementCSS selector or HTML snippet of the failing elementUsed by scanner-bridge to map to source code
Impact levelCritical, Serious, Moderate, or MinorDirect mapping to agent severity model
Remediation guidanceHow to fix the issueEnriched by agent specialists with framework-specific fixes
URLThe page URL where the issue was foundUsed for cross-referencing with local axe-core scans
Screenshot linkLink to screenshot on gh-cache branch (if enabled)Included in audit reports

Severity Mapping

The scanner uses axe-core impact levels that map directly to the agent severity model:

Scanner ImpactAgent SeverityScore Weight
CriticalCritical-15 (both sources) / -10 (single source)
SeriousSerious-7 (high confidence)
ModerateModerate-3 (high confidence)
MinorMinor-1

axe-core Rule Correlation

The scanner uses axe-core under the hood. Scanner issue titles and violation IDs correspond to axe-core rules already cataloged in help-url-reference. Common scanner-reported rules:

axe-core Rule IDWCAG CriterionCommon Description
image-alt1.1.1Images must have alternate text
label1.3.1Form elements must have labels
color-contrast1.4.3Elements must have sufficient color contrast
link-name2.4.4Links must have discernible text
html-has-lang3.1.1<html> element must have a lang attribute
button-name4.1.2Buttons must have discernible text
document-title2.4.2Documents must have <title> element
bypass2.4.1Page must have means to bypass repeated blocks
heading-order1.3.1Heading levels should increase by one
aria-allowed-attr4.1.2ARIA attributes must be allowed for element role

Caching and Delta Detection

The scanner uses a cache_key to persist results across workflow runs. This enables delta tracking:

StatusMeaning
NewIssue found in current scan but not in cached results
FixedIssue in cached results but not found in current scan (issue auto-closed)
PersistentIssue found in both current scan and cached results

Cache Key Conventions

When setting up scanner integration, align the cache key with agent conventions:

  • Use a descriptive name: cached_results-{domain}-{branch}.json
  • Include branch context for branch-specific scanning
  • The cache is stored as a GitHub Actions artifact

Correlation with Local Scans

Dual-Source Confidence Boosting

When both the GitHub Accessibility Scanner (CI) and a local axe-core scan (agent) find the same issue:

  1. Match by rule ID: Both sources use axe-core rule IDs (e.g., color-contrast, image-alt)
  2. Match by URL: Compare the scanned URL from the scanner issue with the local scan target
  3. Match by element: Compare CSS selectors or HTML paths for the affected element
  4. Boost confidence: Findings confirmed by both sources automatically receive high confidence

Source Comparison Analysis

ScenarioInterpretationAction
Found by scanner AND local scanHigh confidence -- confirmed by bothReport as high confidence, full severity weight
Found by scanner onlyEnvironment-specific or intermittentReport as medium confidence, note "CI-only finding"
Found by local scan onlyNew since last CI scan, or local-only conditionReport as medium confidence, note "local-only finding"
In scanner cache as "fixed"Recently remediatedTrack in delta section as resolved

Copilot Fix Tracking

When the scanner assigns issues to GitHub Copilot:

Fix Lifecycle

StageGitHub StateHow to Detect
Issue createdOpen issue, assigned to Copilotassignee includes Copilot bot
Fix proposedOpen PR linked to issuePR references issue number, author is Copilot
Fix reviewedPR has review commentsPR review state is CHANGES_REQUESTED or APPROVED
Fix mergedPR merged, issue closedIssue state is closed, linked PR is merged
Fix rejectedPR closed without mergePR state is closed, not merged

Querying Copilot Fix Status

# Find scanner issues assigned to Copilot
repo:{REPO} is:issue is:open assignee:copilot label:accessibility

# Find Copilot PRs from scanner issues
repo:{REPO} is:pr author:copilot-swe-agent label:accessibility

# Find merged scanner fixes
repo:{REPO} is:pr is:merged author:copilot-swe-agent label:accessibility

Structured Output Format

When scanner-bridge normalizes scanner issue data, it produces findings in this format:

{
  "source": "github-a11y-scanner",
  "ruleId": "color-contrast",
  "wcagCriterion": "1.4.3",
  "wcagLevel": "AA",
  "severity": "serious",
  "confidence": "high",
  "url": "https://example.com/login",
  "element": "button.submit-btn",
  "description": "Element has insufficient color contrast ratio of 3.2:1 (expected 4.5:1)",
  "remediation": "Change the text color or background to achieve at least 4.5:1 contrast ratio",
  "githubIssue": {
    "number": 42,
    "url": "https://github.com/owner/repo/issues/42",
    "state": "open",
    "copilotAssigned": true,
    "fixPR": null
  },
  "screenshot": "https://github.com/owner/repo/blob/gh-cache/screenshots/login-contrast.png"
}

Search Patterns for Scanner Issues

By Repository

repo:{OWNER}/{REPO} is:issue label:accessibility created:>{YYYY-MM-DD}

By Scan Run

Issues from a specific scan run share the same creation timestamp and batch pattern. Filter by:

  • Creation date matching the workflow run date
  • Common label set applied by the scanner

Cross-Repository Scanner Discovery

user:{USERNAME} is:issue label:accessibility sort:created-desc
org:{ORGNAME} is:issue label:accessibility sort:created-desc

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Claude

33.83%
按下载量换算348

Codex

33.31%
按下载量换算342

Cursor

19.15%
按下载量换算197

Gemini CLI

10.19%
按下载量换算105

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

可疑

权限和风险

操作浏览器

该 Skill 可能涉及浏览器控制能力,使用时可能读取或操作网页内容,需要在受控环境中确认权限边界。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在 warning/failed 结果,不能写成本站确认安全。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills