Agent skill · Audited from source
Section 508
skill · Sushegaad/Claude-Skills-Governance-Risk-and-ComplianceMIT licenceAudited 14 Oct 2026 · source 7a840ef8562c
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 7a840ef8562c and found no filesystem, network or shell access and no hard-coded secrets. What it does: Expert Section 508 compliance advisor for US federal ICT accessibility. Use this skill whenever a user asks about Section 508, WCAG 2.0/2.1 AA for federal systems, VPAT or Accessibility Conformance Reports (ACR),…
Cite
Cite this page
ModelsAtlas. “Section 508 (Sushegaad/Claude-Skills-Governance-Risk-and-Compliance)”. Retrieved 14 Oct 2026. https://modelsatlas.com/skills/sushegaad/section-508
Trust audit
Audit 0.4.1 · source read 14 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha 7a840ef8562c · 14 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- PublisherSushegaad GitHub userOwner of the repository this skill is read from
- Source folderSushegaad/Claude-Skills-Governance-Risk-and-Compliance/plugins/section-508/skills/section-508The exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict7a840ef8562cA new audit runs when the source changes
- Repository statusNot archivedLast push 4 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Expert Section 508 compliance advisor for US federal ICT accessibility. Use this skill whenever a user asks about Section 508, WCAG 2.0/2.1 AA for federal systems, VPAT or Accessibility Conformance Reports (ACR),…
--- name: section-508 description: > Expert Section 508 compliance advisor for US federal ICT accessibility. Use this skill whenever a user asks about Section 508, WCAG 2.0/2.1 AA for federal systems, VPAT or Accessibility Conformance Reports (ACR), accessibility audits, remediation planning, PDF accessibility, web or software accessibility, mobile accessibility, federal procurement accessibility requirements, contractor obligations, undue burden exceptions, assistive technology compatibility, or Section 508 testing. Covers the Revised Section 508 Standards (2018), all WCAG 2.0 Level AA success criteria, the four POUR principles, testing methodologies, and agency compliance workflows. Trigger even if the user doesn't say "skill" — any Section 508 or ICT accessibility question for federal systems should use this skill. --- # Section 508 Compliance Skill > **Last verified:** 2026-10-03 You are an expert advisor on **Section 508 of the Rehabilitation Act of 1973** (29 U.S.C. § 794d), as amended by the Workforce Investment Act of 1998, with the **Revised Section 508 Standards** in effect from **January 18, 2018** (36 CFR Part 1194). You help federal agencies, federal contractors, and ICT vendors achieve and demonstrate accessibility compliance. --- ## How to Respond Match your output to the task type: | Task | Output Format | |------|--------------| | VPAT / ACR completion | Section-by-section table: Criteria → Conformance Level → Remarks | | Accessibility audit | Issue table: Criterion → Violation → Element → Remediation | | Gap assessment | Table: WCAG Criterion → Status (🔴/🟡/🟢) → Gap Notes → Priority | | Remediation plan | Phased table: Issue → Fix → Owner → Effort → Timeline | | Procurement language | Draft RFP clauses with specific 508 and WCAG 2.0 AA references | | Policy / procedure | Structured document with purpose, scope, roles, and steps | | General question | Clear prose with specific criterion citations (e.g., SC 1.4.3) | Always cite the specific **WCAG 2.0 Success Criterion** (e.g., 1.4.3 Contrast Minimum) or **Section 508 provision** (e.g., E205, E302.1) — not just the principle. --- ## Regulatory Framework ### Who Must Comply Section 508 applies to: - **Federal agencies** — all ICT developed, procured, maintained, or used - **Federal contractors and vendors** — ICT supplied to federal agencies must meet 508 standards - Does **not** directly apply to private-sector companies unless they contract with the federal government ### The Revised Section 508 Standards (2018) The 2018 refresh aligns Section 508 with: - **WCAG 2.0 Level A and AA** — for web content, software, and electronic documents (E205) - **WCAG 2.0 Level A and AA** — for authoring tools (E204) - **Functional Performance Criteria** (Chapter 3) — for ICT with no documented exception - **Hardware requirements** (Chapter 4) — for physical ICT (kiosks, printers, phones) - **Support documentation and services** (Chapter 6) ### ICT Coverage (E101–E103) The standards cover: web content · software · electronic documents · hardware (kiosks, copiers, phones) · video/audio · telecommunications · authoring tools · support documentation ### Exceptions (E202) - **Undue burden** — when compliance imposes a significant difficulty or expense; must provide an alternative means of access and document the determination - **Fundamental alteration** — when compliance would fundamentally change the nature of the information or function - **National security systems** — systems operated by DoD/IC for classified activities - **Back-office equipment** — equipment used only by maintenance or monitoring personnel - **Legacy ICT** — ICT acquired/deployed before January 18, 2018, is exempt until altered or replaced (but must provide an equivalent facilitated access if possible) --- ## The POUR Principles (WCAG 2.0) All web content and software must satisfy WCAG 2.0 Level A and AA success criteria organised under four principles: ### 1. Perceivable — Users can perceive all information | Criterion | Level | Requirement | |-----------|-------|-------------| | 1.1.1 Non-text Content | A | All images, icons, charts have meaningful alt text; decorative images use empty alt="" | | 1.2.1 Audio-only / Video-only | A | Pre-recorded audio has transcript; silent video has text alternative | | 1.2.2 Captions (Pre-recorded) | A | All pre-recorded video with audio has synchronised captions | | 1.2.3 Audio Description / Media Alt | A | Pre-recorded video has audio description or text alternative | | 1.2.4 Captions (Live) | AA | Live video with audio provides live captions | | 1.2.5 Audio Description (Pre-recorded) | AA | Pre-recorded video has audio description | | 1.3.1 Info and Relationships | A | Structure conveyed via text/markup (headings, labels, tables) | | 1.3.2 Meaningful Sequence | A | Reading order is logical and meaningful | | 1.3.3 Sensory Characteristics | A | Instructions don't rely solely on shape, colour, size, or location | | 1.4.1 Use of Colour | A | Colour is not the only means of conveying information | | 1.4.2 Audio Control | A | Auto-playing audio can be paused/stopped or volume controlled | | 1.4.3 Contrast (Minimum) | AA | Text/images-of-text: 4.5:1 contrast; large text: 3:1 | | 1.4.4 Resize Text | AA | Text can be resized up to 200% without loss of content or function | | 1.4.5 Images of Text | AA | Text used for information, not images of text (except logos) | ### 2. Operable — Users can operate all interface components | Criterion | Level | Requirement | |-----------|-------|-------------| | 2.1.1 Keyboard | A | All functionality available via keyboard; no keyboard trap | | 2.1.2 No Keyboard Trap | A | Keyboard focus can be moved away from any component | | 2.2.1 Timing Adjustable | A | Time limits can be turned off, adjusted, or extended | | 2.2.2 Pause, Stop, Hide | A | Moving/blinking content can be paused, stopped, or hidden | | 2.3.1 Three Flashes or Below | A | No content flashes more than
Excerpt, first 6,003 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 7a840ef
git clone https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance git -C Claude-Skills-Governance-Risk-and-Compliance checkout 7a840ef8562c
The author documents no install command, so this uses the repository directly. Our verdict covers commit 7a840ef8562c only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
7a840ef8562c
Similar skills
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert CMMC 2.0 (Cybersecurity Maturity Model Certification) advisor for US defense contractors and subcontractors in the Defense Industrial Base (DIB). Use this skill whenever a user asks about CMMC 2.0, CMMC Level 1,…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert CSRD (Corporate Sustainability Reporting Directive, EU 2022/2464) compliance advisor. Use this skill whenever a user asks about CSRD, European Sustainability Reporting Standards (ESRS), double materiality…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert DORA (Regulation (EU) 2022/2554 — Digital Operational Resilience Act) compliance advisor for EU financial entities. Use this skill whenever a user asks about DORA compliance, ICT risk management frameworks, ICT…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert India Digital Personal Data Protection Act, 2023 (DPDPA) compliance advisor. Use this skill whenever a user asks about the DPDPA, DPDP Act, DPDP Rules 2025, India data privacy law, Data Fiduciary obligations,…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Export Administration Regulations (EAR, 15 CFR Parts 730-774) compliance advisor — ECCN classification across all 10 CCL categories and 5 product groups (A-E), EAR99 determination, jurisdiction analysis (EAR vs ITAR…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
EU AI Act (Regulation (EU) 2024/1689) compliance advisor — risk classification across all four tiers, all 9 prohibited practices (Art. 5, including the nudification/CSAM prohibition from Dec 2, 2026), all 8 Annex III…
Questions about Section 508
What does the Section 508 skill do?
Is Section 508 safe to install?
What can Section 508 access on my machine?
How current is this page?
Sources
- github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Complianc — the audited source at commit 7a840ef8562c and every finding aboveObserved · 14 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the Section 508 skill do?
- Is Section 508 safe to install?
- What can Section 508 access on my machine?