{"id":85628,"plugin_id":"plugin_asdk_app_6ada68616590819197685ef0b29787d2","kind":"skill","collection_source":"plugin_package","comparison_source":null,"observed_at":"2026-11-07T06:14:30.072Z","digest":"0a3a31d322004fde706ede35980ccadd75b88c6ceb53f18054dc9c0a78883acc","against":null,"payload":{"description":"Audit website accessibility with approved browser axe-core execution or completed axe exports; when execution is unavailable, guide setup and provide a clearly labelled limited browser review, prioritized with Noibu traffic where available.","included_files":[{"relative_path":"agents/openai.yaml","size_in_bytes":334},{"relative_path":"assets/LICENSE","size_in_bytes":15921},{"relative_path":"assets/LICENSE-3RD-PARTY.txt","size_in_bytes":3766},{"relative_path":"assets/axe.min.js","size_in_bytes":652140},{"relative_path":"references/execution-and-review.md","size_in_bytes":12217},{"relative_path":"references/remediation-actions.md","size_in_bytes":4016},{"relative_path":"references/report.md","size_in_bytes":9274},{"relative_path":"references/scan-and-findings.md","size_in_bytes":8349},{"relative_path":"scripts/build_deliverables.py","size_in_bytes":20820},{"relative_path":"scripts/build_report.py","size_in_bytes":12890},{"relative_path":"scripts/build_review.py","size_in_bytes":8817},{"relative_path":"scripts/observe-page.js","size_in_bytes":3035},{"relative_path":"scripts/scan-page.js","size_in_bytes":2048}],"name":"accessibility-audit","skill_md_contents":"---\nname: accessibility-audit\ndescription: Audit website accessibility with approved browser axe-core execution or completed axe exports; when execution is unavailable, guide setup and provide a clearly labelled limited browser review, prioritized with Noibu traffic where available.\n---\n\n# Accessibility audit\n\n- Read [shared query guidance](../querying-noibu-data/SKILL.md), [runtime/actions](../querying-noibu-data/references/chatgpt-runtime.md) and [execution setup](references/execution-and-review.md). Use skill `accessibility-audit`.\n- Discover browser capabilities before unnecessary traffic queries. Completed axe exports need provenance, not a new browser connection.\n\n## Prerequisites and execution\n\nBefore a connected-Chrome scan, show/verify this checklist; ask only for missing confirmation:\n\n- Official ChatGPT Chrome extension connected to the intended profile.\n- **Settings → Browser → Developer mode → Enable full CDP access**, if the organization permits.\n- Native approval for the specific website/debugging request; pending approval is not execution failure.\n\nThe built-in browser is a separate option without Chrome-extension requirements. Never change security settings automatically; terminal/Custom permissions do not grant browser scripting.\n\n- Read the current browser API and [scan/findings procedure](references/scan-and-findings.md).\n- Use supported document-readiness operations, then a minimal approved awaited-result execution probe; only after success load bundled checksum-pinned axe and run the bundled scan expression.\n- Distinguish temporary paused-document CDP errors from missing permissions/interface; follow the bounded readiness/retry procedure rather than declaring advertised CDP unusable after one transient error.\n- Results return from the page. Do not bypass denial through shell, raw CDP, console, bookmarklets or another automation channel, or substitute a remote job automatically.\n- Completed exports retain original URL/time/state/engine/options and are not fresh scans. A separately requested remote job is outside this browser flow; QUEUED is not findings.\n\n## Scope and resume\n\n- A named-page request covers that page. Full-site audits select up to ten pages by 30-day Noibu pageviews using `noibu_get_page_visits`; explain scope. Traffic ranks priority but is optional for an explicitly supplied URL.\n- Reuse selected URLs/window and validate completed evidence on resume; preserve immutable original time/state/options and scan remaining pages only. One completed homepage in ten pages means nine pending, not ten new scans.\n- Without approved execution, guide permitted setup and rediscover capabilities. Unless axe-only, perform the distinct **Browser-based accessibility review — axe not run** using supported snapshots/screenshots/read-only observations. Report reviewed/unreviewed pages, manual observations, verification items and unchecked states.\n- Limited review uses [the review exporter](scripts/build_review.py): zero completed axe scans, unknown automated severities, no invented axe violations. If inspection is unavailable or axe-only, return the precise prerequisite and selected scope.\n\n## Findings and deliverables\n\n- Pool confirmed shared-component findings by rule/criterion plus stable selector. Keep per-page nodes and count affected pageviews once per unique page.\n- Rank severity weight × log10(max(1, affected pageviews)) × min(2, 1 + 0.2 × affected page count). Missing traffic stays unknown; incomplete checks are verification items, not violations.\n- Report distinct violated rules, affected page/target elements, raw rule/node instances, pooled fixes and incomplete checks separately, with completed/failed/unscanned pages and rendered states.\n- Follow [report format](references/report.md): verified PDF attachment, concise summary from the same normalized evidence, a severity table with what needs to change for each finding (plain words, no code) and the top finding. Preserve its legal text/disclaimer exactly; automated checks do not certify compliance.\n- Keep iframe/shadow-root/hidden-state/manual limits visible; unreviewed pages are not clean. Limited/blocked reports retain unknown axe counts, including in PDFs.\n- Use [inline presentation](../querying-noibu-data/references/presentation.md) for **Auto-draft PR** / **Auto-create tickets**, visibly scoped to actual top finding IDs. [Remediation actions](references/remediation-actions.md) resolve connections/destinations after selection; rendering creates nothing.\n- Investigate/Get fix/source remediation uses [source access](../querying-noibu-data/references/source-access.md): no code-level fix without connected source. Preserve completed audit evidence while connection/ref/ownership verification is pending; vendor/managed components need owner handoff. Scanning/reporting does not require source.\n\n## Recurrence\n\n- Follow [connected delivery](../querying-noibu-data/references/scheduling-delivery.md). Confirm audit mode, standard, rendered states and fixed-URL versus traffic-ranked selection rule.\n- Verify approved browser readiness/execution in the scheduled runtime before promising fresh axe scans; interactive success does not prove unattended access.\n- Missing execution requires a concrete blocker and consent before an alternative. Never replay exports as fresh or silently downgrade axe-only scope.\n- Report scheduling does not authorize remediation, PRs, tickets, remote jobs or setup-time delivery.\n"},"changes":[],"summary":"First saved snapshot. No earlier version is available for comparison.","summary_kind":"deterministic","summary_metadata":{}}