安全审查

Name: 安全审查
Author: CharlesWiltgen

工程开发已审计

作者仓库星标 977
叉子 74
许可证 MIT
作者更新于 2026年6月15日 03:09
作者仓库 Axiom

流狐档案事实层信息：领域、Agent、信任分、运行环境、权限与网络

领域: 工程开发
兼容 Agent: Claude Code
Cursor
Cline
Codex
Windsurf
Gemini CLI

+20
信任分: 94 / 100 · 已通过审计
作者 / 版本 / 许可: @CharlesWiltgen · MIT
Token 消耗评级: 低消耗
接入复杂程度: 即装即用
是否需要外部 API Key: 不需要
兼容的系统: macOS
底层运行要求: 无特殊要求
文件与系统权限: 只读
允许写入 / 修改
网络行为: 仅限本地
安装命令数: 26 条

档案由构建时根据 SKILL.md 与安装命令自动衍生，可能与作者实际意图存在差异。

需要注意： 未限定 allowed-tools，默认拥有全部工具权限。

输出预览 axiom-accessibility.preview

---
name: axiom-accessibility
description: Use when fixing or auditing ANY accessibility issue — VoiceOver, Dynamic Type, color contrast, t…
category: 工程开发
runtime: 无特殊运行时
---

# axiom-accessibility 输出预览

## PART A: 任务判断
- 适用问题：代码实现、重构、调试或代码审查。
- 输入要求：目标材料、限制条件、期望输出和验收方式。
- 证据边界：围绕“Quick Reference / Cross-Suite Routes / Decision Tree”读取原文规则，不把推断写成作者承诺。

## PART B: 执行结果
- **01** 任务判断：确认你的需求是否属于代码实现、重构、调试或代码审查，并标出输入、限制和预期结果。
- **02** 执行计划：优先按“Quick Reference / Cross-Suite Routes / Decision Tree”拆成步骤，说明每一步会读取什么、修改什么、产出什么。
- **03** 交付结果：给出可复制的命令、文件改动、检查清单或内容草稿，并说明如何继续迭代。
- **04** 风险边界：结合 读取文件、写入/修改文件、主要在本地完成、通常不需要额外 API Key 给出执行前确认项。

## Running Rules
- 读取文件、写入/修改文件；主要在本地完成；通常不需要额外 API Key。
- 先小样例验证，再放大到真实任务。
- 交付时同时给结果、检查口径和下一步迭代建议。

SKILL.md SKILL.md

---
name: axiom-accessibility
description: Use when fixing or auditing ANY accessibility issue — VoiceOver, Dynamic Type, color contrast, t…
category: 工程开发
source: CharlesWiltgen/Axiom
---

# axiom-accessibility

## 什么时候使用
- 发现无障碍缺陷时，按规范定位并修复体验断点 覆盖 VoiceOver、Dynamic Type、对比度、触控目标和 WCAG 检查 可接入代码审查、UX 流程审计、App Store 审核准备 本地运行，适配 Claude Code、C…
- 面向代码实现、重构、调试或代码审查，优先处理能明确输入、步骤和验收标准的工作。

## 需要提供什么
- 目标材料、目录范围、期望结果和不可改动内容。
- 是否允许联网、执行命令、读写文件或调用外部服务。

## 执行规则
- 围绕「Quick Reference / Cross-Suite Routes / Decision Tree」组织步骤，不把推断写成作者事实。
- 读取文件、写入/修改文件；主要在本地完成；通常不需要额外 API Key。
- 先跑小样例，确认结果可检查后再扩大任务范围。

## 输出要求
- 给出最终产物、关键证据、验证方式和下一步动作。
- 信息不足时标记 unknown，不编造命令、平台或依赖。

证据边界与执行链路

作者原文负责流程事实；仓库文件负责来源和命令；流狐只补充适用场景、限制和质量判断。

skill "axiom-accessibility" {
  输入层     -> 用户目标 + 目标文件 + 禁止范围 + 验收标准
  上下文层   -> Quick Reference / Cross-Suite Routes / Decision Tree
  规则层     -> SKILL.md 触发条件 / 执行顺序 / 输出格式
  运行层     -> 无特殊运行时 | 读取文件、写入/修改文件 | 主要在本地完成
  安全层     -> 通常不需要额外 API Key + 小任务验证 + diff / 日志复核
  输出层     -> 可复制结果 + 检查清单 + 下一步迭代
}

解读按原文结构重写，命令、链接、术语均保留；右侧可核对作者原始 SKILL.md

先判断是否适合

核心用途：发现无障碍缺陷时，按规范定位并修复体验断点覆盖 VoiceOver、Dynamic Type、对比度、触控目标和 WCAG 检查可接入代码审查、UX 流程审计、App Store 审核准备本地运行，适配 Claude Code、C 适合处理工程开发场…
适用任务：更适合工程开发场景下的代码实现、调试、重构、测试或代码审查，尤其是输入、步骤、验收口径可以反复复用的场景。
不宜硬套：如果任务只有一次性问答、来源材料很少，或需要作者没有说明的命令和外部服务，应先降级为普通对话。

作者设计意图

触发依据：使用时机、上下文收集、输出格式和失败处理共同决定它是否适合当前任务。
来源边界：作者原文负责事实，仓库文件负责命令和文件证据；Fluxly 只补充用途、限制和使用判断。

作者的方法与取舍

执行主线：任务围绕「Quick Reference / Cross-Suite Routes / Decision Tree」组织，把触发条件、必要上下文、执行规则和交付标准连成一条可复核的链路。
设计重点：重点不在重复教程，而在解释作者为什么规定这些步骤、哪些条件不可省略，以及结果偏离时应回到哪一层检查。
使用判断：先确认任务与原文边界一致，再决定是否启用；来源没有说明的命令、平台和依赖保持未知，不由 Fluxly 补写。

边界和复核

依赖条件：通常不需要额外 API Key，适合先用小任务验证触发是否稳定。
权限提醒：会涉及 read / write 权限，执行前要说明可读写范围、命令边界和回退方式。
质量标准：结果应包含明确产物、必要证据和下一步动作；如果只是泛泛解释，需要补充输入和验收条件后重跑。

Accessibility

You MUST use this skill for ANY accessibility work including VoiceOver, Dynamic Type, color contrast, WCAG compliance, and UX flow auditing.

Quick Reference

Symptom / Task	Reference
VoiceOver labels, hints, navigation	See `skills/accessibility-diag.md`
Dynamic Type scaling violations	See `skills/accessibility-diag.md`
Dynamic Type on tvOS (Large Text, tvOS 27)	See `skills/accessibility-diag.md`
Long-form reading apps (continuous reading, Speak Screen, text navigation)	See `skills/accessibility-diag.md`
Captions & subtitle styling in video players (generated subtitles, style preview)	See `skills/accessibility-diag.md`
Custom control technique choice (adjustable, passthrough, direct touch)	See `skills/accessibility-diag.md`
Accessibility Nutrition Labels	See `skills/accessibility-diag.md`
Color contrast (WCAG AA/AAA)	See `skills/accessibility-diag.md`
Touch target sizes (< 44x44pt)	See `skills/accessibility-diag.md`
Keyboard navigation (iPadOS/macOS)	See `skills/accessibility-diag.md`
Reduce Motion support	See `skills/accessibility-diag.md`
Assistive Access (cognitive, iOS 17+)	See `skills/accessibility-diag.md`
Accessibility Inspector workflows	See `skills/accessibility-diag.md`
App Store Review preparation	See `skills/accessibility-diag.md`
UX dead ends, dismiss traps	See `skills/ux-flow-audit.md`
Buried CTAs, missing empty states	See `skills/ux-flow-audit.md`
Missing loading/error states	See `skills/ux-flow-audit.md`
Deep link dead ends	See `skills/ux-flow-audit.md`
Accessibility dead ends (gesture-only)	See `skills/ux-flow-audit.md`
watchOS-specific (VoiceOver rotor on Digital Crown, AssistiveTouch, Double Tap)	See `skills/watchos-a11y.md`

Cross-Suite Routes

Full watchOS development context → See axiom-watchos
Live accessibility validation on the simulator (set toggles, assert announcements) → simulator-tester agent + xcui — see axiom-tools (skills/xcui-ref.md)

Decision Tree

digraph accessibility {
    start [label="Accessibility issue" shape=ellipse];
    what [label="What type?" shape=diamond];

    start -> what;
    what -> "skills/accessibility-diag.md" [label="VoiceOver/labels/hints"];
    what -> "skills/accessibility-diag.md" [label="Dynamic Type"];
    what -> "skills/accessibility-diag.md" [label="color contrast"];
    what -> "skills/accessibility-diag.md" [label="touch targets"];
    what -> "skills/accessibility-diag.md" [label="keyboard nav"];
    what -> "skills/accessibility-diag.md" [label="Reduce Motion"];
    what -> "skills/accessibility-diag.md" [label="Assistive Access"];
    what -> "skills/accessibility-diag.md" [label="custom control techniques"];
    what -> "skills/accessibility-diag.md" [label="continuous reading / text navigation"];
    what -> "skills/accessibility-diag.md" [label="captions / subtitle styling"];
    what -> "skills/accessibility-diag.md" [label="App Store prep / Nutrition Labels"];
    what -> "skills/ux-flow-audit.md" [label="UX dead end/dismiss trap"];
    what -> "skills/ux-flow-audit.md" [label="missing states"];
    what -> "skills/watchos-a11y.md" [label="watchOS VoiceOver / AssistiveTouch / Double Tap"];
    what -> "accessibility-auditor" [label="automated scan" shape=box];
}

ANY VoiceOver, Dynamic Type (including tvOS Large Text), contrast, touch target, or WCAG issue → skills/accessibility-diag.md
Assistive Access (cognitive disabilities, iOS 17+) → skills/accessibility-diag.md
App Store accessibility rejection or Nutrition Labels → skills/accessibility-diag.md
Reading app: VoiceOver stops at paragraphs/pages, Speak Screen halts → skills/accessibility-diag.md
UX dead ends, dismiss traps, buried CTAs, missing states → skills/ux-flow-audit.md
watchOS-specific accessibility (rotor on Digital Crown, AssistiveTouch, Double Tap) → skills/watchos-a11y.md
Want automated accessibility scan? → accessibility-auditor agent or /axiom:audit accessibility

Automated Scanning

Accessibility audit → Launch accessibility-auditor agent or /axiom:audit accessibility

VoiceOver labels and hints
Dynamic Type violations
Color contrast failures
WCAG compliance scanning

UX flow audit → Launch ux-flow-auditor agent

Dead-end views, dismiss traps
Buried CTAs, missing empty/loading/error states
Deep link dead ends, accessibility dead ends

Critical Patterns

Image Accessibility

Use Image(decorative: "photo") for purely decorative images — automatically hidden from VoiceOver (equivalent to accessibilityHidden(true) but semantically clearer)
Use accessibilityInputLabels() for buttons with complex or changing labels — improves Voice Control accuracy by providing alternative labels
Respect accessibilityDifferentiateWithoutColor environment value — when active, provide non-color cues (icons, patterns, labels) alongside color indicators

Anti-Rationalization

Thought	Reality
"I'll add VoiceOver labels when I'm done building"	Accessibility is foundational, not polish. accessibility-diag prevents App Store rejection.
"My app doesn't need accessibility"	All apps need accessibility. It's required by App Store guidelines and benefits all users.
"Dynamic Type just needs .scaledFont"	Dynamic Type has 7 common violations. accessibility-diag catches them all.
"Color contrast looks fine to me"	Visual assessment is unreliable. WCAG ratios require measurement. accessibility-diag validates.
"UX issues are just polish"	UX dead ends cause 1-star reviews. They're defects, not enhancements.
"The dismiss gesture handles it"	fullScreenCover has no dismiss gesture. That's the trap.

Example Invocations

User: "My button isn't being read by VoiceOver" → See skills/accessibility-diag.md

User: "How do I support Dynamic Type?" → See skills/accessibility-diag.md

User: "Check my app for accessibility issues" → See skills/accessibility-diag.md

User: "Prepare for App Store accessibility review" → See skills/accessibility-diag.md

User: "Scan my app for accessibility issues automatically" → Launch accessibility-auditor agent

User: "How do I support Assistive Access?" → See skills/accessibility-diag.md

User: "How do I prepare my tvOS app for Large Text?" → See skills/accessibility-diag.md

User: "VoiceOver stops reading at the end of each page in my book app" → See skills/accessibility-diag.md

User: "How do I let users restyle subtitles or get generated captions in my video player?" → See skills/accessibility-diag.md

User: "Check for UX dead ends and dismiss traps" → See skills/ux-flow-audit.md

User: "My fullScreenCover has no way to dismiss" → See skills/ux-flow-audit.md

User: "Are there missing empty states in my app?" → See skills/ux-flow-audit.md

安装命令

一键复制安装选择包管理器,点击右侧复制,粘贴到终端回车即可

npx skills add CharlesWiltgen/Axiom/axiom-codex/skills/axiom-accessibility -y

查看通用安装教程

查看 Skill 原文

兼容工具

Claude Code
Cursor
Cline
Codex
Windsurf
Gemini
OpenCode
Roo Code
AAide
+Augment
GitHub Copilot
OpenClaw
KKiro
Junie
WWarp
Goose
Trae
Kilo Code
OpenHands
Amp
Zencoder
CContinue
AIAider
CodeBuddy
CodeGeeX
Replit Agent

安全审计

94 / 100

已审计

未声明 version。
未限定 allowed-tools，默认拥有全部工具权限。

元信息

来源: local
CharlesWiltgen/Axiom
许可证: MIT
English

@CharlesWiltgen 的其他技能

分类与标签

分类工程开发