Install
$ agentstack add skill-mteelokee-rgaa-accessibility-audit-rgaa-scripts ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
RGAA Scripts Accessibility Audit (Theme 7)
Audits a web page against the 5 criteria of RGAA v4.1.2 Theme 7: Scripts.
Audit procedure
Step 1: Gather interactive component data
(() => {
const components = [];
// ARIA widgets
const ariaRoles = ['button','tab','tabpanel','tablist','dialog','alertdialog','menu',
'menuitem','menubar','listbox','option','combobox','slider','spinbutton',
'progressbar','tooltip','tree','treeitem','grid','gridcell','switch',
'checkbox','radio','radiogroup','accordion','alert','status','log','marquee','timer'];
ariaRoles.forEach(role => {
document.querySelectorAll(`[role="${role}"]`).forEach(el => {
components.push({
tag: el.tagName.toLowerCase(),
role: role,
ariaLabel: el.getAttribute('aria-label'),
ariaLabelledby: el.getAttribute('aria-labelledby'),
ariaDescribedby: el.getAttribute('aria-describedby'),
ariaExpanded: el.getAttribute('aria-expanded'),
ariaSelected: el.getAttribute('aria-selected'),
ariaChecked: el.getAttribute('aria-checked'),
ariaHidden: el.getAttribute('aria-hidden'),
ariaLive: el.getAttribute('aria-live'),
ariaDisabled: el.getAttribute('aria-disabled'),
tabindex: el.getAttribute('tabindex'),
hasOnclick: !!el.getAttribute('onclick') || el.tagName === 'DIV' || el.tagName === 'SPAN',
text: el.textContent.trim().substring(0, 60)
});
});
});
// Clickable non-interactive elements (potential issues)
const clickables = [];
document.querySelectorAll('div[onclick], span[onclick], div[tabindex], span[tabindex]').forEach(el => {
if (!el.getAttribute('role')) {
clickables.push({
tag: el.tagName.toLowerCase(),
tabindex: el.getAttribute('tabindex'),
role: el.getAttribute('role'),
text: el.textContent.trim().substring(0, 60),
hasKeyHandler: !!(el.getAttribute('onkeydown') || el.getAttribute('onkeypress') || el.getAttribute('onkeyup'))
});
}
});
// Live regions
const liveRegions = [];
document.querySelectorAll('[aria-live], [role="alert"], [role="status"], [role="log"], [role="marquee"], [role="timer"]').forEach(el => {
liveRegions.push({
tag: el.tagName.toLowerCase(),
role: el.getAttribute('role'),
ariaLive: el.getAttribute('aria-live'),
ariaAtomic: el.getAttribute('aria-atomic'),
ariaRelevant: el.getAttribute('aria-relevant'),
text: el.textContent.trim().substring(0, 80)
});
});
return JSON.stringify({
ariaComponents: components.slice(0, 40),
clickableNonInteractive: clickables.slice(0, 20),
liveRegions: liveRegions
}, null, 2);
})()
Step 2: Evaluate criteria
Criterion 7.1 – Scripts are compatible with assistive technologies.
For each script-driven component, check:
- It has a proper ARIA role (or uses a native HTML element)
- It has an accessible name (aria-label, aria-labelledby, or visible text)
- Its states are communicated (aria-expanded, aria-selected, aria-checked, etc.)
- State changes are reflected in the DOM (not just visual changes)
- Non-interactive elements (
div,span) used as buttons/links have appropriateroleand keyboard support
Criterion 7.2 – Script alternatives are relevant. If a script component has a fallback (noscript content), verify it provides equivalent functionality.
Criterion 7.3 – Scripts are keyboard- and pointer-controllable.
- Every interaction possible with a mouse must also work with keyboard
- No keyboard trap (user can always tab away)
- Click handlers on non-interactive elements need corresponding keydown/keypress handlers
- Touch-only gestures need an alternative
Test by tabbing through the page and verifying all interactive elements receive focus and can be activated.
Criterion 7.4 – Context changes initiated by scripts inform the user.
- If a script changes page content (e.g., auto-updating region, dynamic content load), the user must be informed
- Form auto-submission on selection change needs prior warning
- New windows opened by scripts need indication
Criterion 7.5 – Status messages use ARIA live regions. Status messages (form validation, loading indicators, search results count, cart updates) must be announced without moving focus. Check for:
role="status"oraria-live="polite"for non-urgent updatesrole="alert"oraria-live="assertive"for important/urgent messages- Messages dynamically injected into the DOM must be inside a live region that existed before the content was added
Step 3: Keyboard testing
Use the browser to tab through the page:
- Verify all interactive components receive visible focus
- Verify they can be activated (Enter/Space for buttons, arrows for tabs/menus)
- Verify there are no keyboard traps
- Verify custom widgets follow WAI-ARIA Authoring Practices keyboard patterns
Step 4: Generate report
For each interactive component, list its role, accessible name, state management, and keyboard accessibility. Flag missing ARIA attributes, keyboard traps, and absent live regions.
WCAG references: 9.2.1.1 (A), 9.2.1.2 (A), 9.3.2.1 (A), 9.4.1.2 (A), 9.4.1.3 (AA)
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: MTeelokee
- Source: MTeelokee/rgaa-accessibility-audit
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.