Update to Noibu

{
  "description": "Audit website accessibility with approved browser axe-core execution or completed axe exports; when execution is unavailable, guide setup and provide a clearly labelled limited browser review, prioritized with Noibu traffic where available.",
  "included_files": [
    {
      "relative_path": "agents/openai.yaml",
      "size_in_bytes": 334
    },
    {
      "relative_path": "assets/LICENSE",
      "size_in_bytes": 15921
    },
    {
      "relative_path": "assets/LICENSE-3RD-PARTY.txt",
      "size_in_bytes": 3766
    },
    {
      "relative_path": "assets/axe.min.js",
      "size_in_bytes": 652140
    },
    {
      "relative_path": "references/execution-and-review.md",
      "size_in_bytes": 12217
    },
    {
      "relative_path": "references/remediation-actions.md",
      "size_in_bytes": 4016
    },
    {
      "relative_path": "references/report.md",
      "size_in_bytes": 9274
    },
    {
      "relative_path": "references/scan-and-findings.md",
      "size_in_bytes": 8349
    },
    {
      "relative_path": "scripts/build_deliverables.py",
      "size_in_bytes": 20820
    },
    {
      "relative_path": "scripts/build_report.py",
      "size_in_bytes": 12890
    },
    {
      "relative_path": "scripts/build_review.py",
      "size_in_bytes": 8817
    },
    {
      "relative_path": "scripts/observe-page.js",
      "size_in_bytes": 3035
    },
    {
      "relative_path": "scripts/scan-page.js",
      "size_in_bytes": 2048
    }
  ],
  "name": "accessibility-audit",
  "skill_md_contents": "---\nname: accessibility-audit\ndescription: Audit website accessibility with approved browser axe-core execution or completed axe exports; when execution is unavailable, guide setup and provide a clearly labelled limited browser review, prioritized with Noibu traffic where available.\n---\n\n# Accessibility audit\n\n- Read [shared query guidance](../querying-noibu-data/SKILL.md), [runtime/actions](../querying-noibu-data/references/chatgpt-runtime.md) and [execution setup](references/execution-and-review.md). Use skill `accessibility-audit`.\n- Discover browser capabilities before unnecessary traffic queries. Completed axe exports need provenance, not a new browser connection.\n\n## Prerequisites and execution\n\nBefore a connected-Chrome scan, show/verify this checklist; ask only for missing confirmation:\n\n- Official ChatGPT Chrome extension connected to the intended profile.\n- **Settings → Browser → Developer mode → Enable full CDP access**, if the organization permits.\n- Native approval for the specific website/debugging request; pending approval is not execution failure.\n\nThe built-in browser is a separate option without Chrome-extension requirements. Never change security settings automatically; terminal/Custom permissions do not grant browser scripting.\n\n- Read the current browser API and [scan/findings procedure](references/scan-and-findings.md).\n- Use supported document-readiness operations, then a minimal approved awaited-result execution probe; only after success load bundled checksum-pinned axe and run the bundled scan expression.\n- Distinguish temporary paused-document CDP errors from missing permissions/interface; follow the bounded readiness/retry procedure rather than declaring advertised CDP unusable after one transient error.\n- Results return from the page. Do not bypass denial through shell, raw CDP, console, bookmarklets or another automation channel, or substitute a remote job automatically.\n- Completed exports retain original URL/time/state/engine/options and are not fresh scans. A separately requested remote job is outside this browser flow; QUEUED is not findings.\n\n## Scope and resume\n\n- A named-page request covers that page. Full-site audits select up to ten pages by 30-day Noibu pageviews using `noibu_get_page_visits`; explain scope. Traffic ranks priority but is optional for an explicitly supplied URL.\n- Reuse selected URLs/window and validate completed evidence on resume; preserve immutable original time/state/options and scan remaining pages only. One completed homepage in ten pages means nine pending, not ten new scans.\n- Without approved execution, guide permitted setup and rediscover capabilities. Unless axe-only, perform the distinct **Browser-based accessibility review — axe not run** using supported snapshots/screenshots/read-only observations. Report reviewed/unreviewed pages, manual observations, verification items and unchecked states.\n- Limited review uses [the review exporter](scripts/build_review.py): zero completed axe scans, unknown automated severities, no invented axe violations. If inspection is unavailable or axe-only, return the precise prerequisite and selected scope.\n\n## Findings and deliverables\n\n- Pool confirmed shared-component findings by rule/criterion plus stable selector. Keep per-page nodes and count affected pageviews once per unique page.\n- Rank severity weight × log10(max(1, affected pageviews)) × min(2, 1 + 0.2 × affected page count). Missing traffic stays unknown; incomplete checks are verification items, not violations.\n- Report distinct violated rules, affected page/target elements, raw rule/node instances, pooled fixes and incomplete checks separately, with completed/failed/unscanned pages and rendered states.\n- Follow [report format](references/report.md): verified PDF attachment, concise summary from the same normalized evidence, a severity table with what needs to change for each finding (plain words, no code) and the top finding. Preserve its legal text/disclaimer exactly; automated checks do not certify compliance.\n- Keep iframe/shadow-root/hidden-state/manual limits visible; unreviewed pages are not clean. Limited/blocked reports retain unknown axe counts, including in PDFs.\n- Use [inline presentation](../querying-noibu-data/references/presentation.md) for **Auto-draft PR** / **Auto-create tickets**, visibly scoped to actual top finding IDs. [Remediation actions](references/remediation-actions.md) resolve connections/destinations after selection; rendering creates nothing.\n- Investigate/Get fix/source remediation uses [source access](../querying-noibu-data/references/source-access.md): no code-level fix without connected source. Preserve completed audit evidence while connection/ref/ownership verification is pending; vendor/managed components need owner handoff. Scanning/reporting does not require source.\n\n## Recurrence\n\n- Follow [connected delivery](../querying-noibu-data/references/scheduling-delivery.md). Confirm audit mode, standard, rendered states and fixed-URL versus traffic-ranked selection rule.\n- Verify approved browser readiness/execution in the scheduled runtime before promising fresh axe scans; interactive success does not prove unattended access.\n- Missing execution requires a concrete blocker and consent before an alternative. Never replay exports as fresh or silently downgrade axe-only scope.\n- Report scheduling does not authorize remediation, PRs, tickets, remote jobs or setup-time delivery.\n"
}