Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add bromso/metapowers --skill ada-wcaggit clone --depth 1 https://github.com/bromso/metapowersWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bromso/metapowers/ada-wcag)<a href="https://agentmods.dev/skills/bromso/metapowers/ada-wcag"><img src="https://agentmods.dev/badge/skills/bromso/metapowers/ada-wcag/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bromso/metapowers/ada-wcag"><img src="https://agentmods.dev/badge/skills/bromso/metapowers/ada-wcag.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00018 | $0.01449 |
| Opus 5 | $0.00009 | $0.00724 |
| Sonnet 5 | $0.00004 | $0.00290 |
| Haiku 4.5 | $0.00002 | $0.00145 |
Grade A, and why
ada-wcag scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 83 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ADA / WCAG 2.2 Assessment
Assess ADA Title III and WCAG 2.2 Level AA compliance for "$ARGUMENTS". Evaluate web accessibility legal requirements, enforcement trends, and remediation planning with attention to heightened state requirements.
Prerequisites
Read .metapowers/compliance/$ARGUMENTS/00-scope.md. If this file does not exist, tell the user:
Phase 0 (Scope) has not been completed for "$ARGUMENTS". Run
/compliance:regulatory-landscape $ARGUMENTSfirst, or use--skip-checksto bypass.
If --skip-checks is present in $ARGUMENTS, skip this check.
Process
-
Read context files:
- Read
plugins/compliance/shared/grc-lifecycle-guide.mdfor GRC methodology reference - Read
plugins/compliance/shared/assessment-template.mdfor output structure - Read
.metapowers/compliance/$ARGUMENTS/00-scope.mdfor scope and control framework context
- Read
-
ADA Title III applicability assessment:
- Determine if the organization operates a "place of public accommodation" with digital presence
- Assess DOJ rulemaking and guidance on web accessibility under ADA Title III
- Evaluate applicability of DOJ's April 2024 final rule on web and mobile accessibility (State and local governments under Title II; private sector guidance under Title III)
- Review Section 508 applicability for federal-facing services
- Assess state-level accessibility laws (California Unruh Civil Rights Act, New York State Human Rights Law)
-
WCAG 2.2 Level AA assessment:
- Assess against all WCAG 2.2 Level AA success criteria across four principles:
- Perceivable: text alternatives (1.1.1), captions (1.2.2), audio description (1.2.5), info and relationships (1.3.1), meaningful sequence (1.3.2), sensory characteristics (1.3.3), orientation (1.3.4), input purpose (1.3.5), contrast (1.4.3), resize text (1.4.4), images of text (1.4.5), reflow (1.4.10), non-text contrast (1.4.11), text spacing (1.4.12), content on hover/focus (1.4.13)
- Operable: keyboard (2.1.1), no keyboard trap (2.1.2), timing adjustable (2.2.1), pause/stop/hide (2.2.2), three flashes (2.3.1), bypass blocks (2.4.1), page titled (2.4.2), focus order (2.4.3), link purpose (2.4.4), multiple ways (2.4.5), headings and labels (2.4.6), focus visible (2.4.7), focus not obscured minimum (2.4.11), dragging movements (2.5.7), target size minimum (2.5.8)
- Understandable: language of page (3.1.1), language of parts (3.1.2), on focus (3.2.1), on input (3.2.2), consistent navigation (3.2.3), consistent identification (3.2.4), error identification (3.3.1), labels (3.3.2), error suggestion (3.3.3), error prevention (3.3.4), redundant entry (3.3.7), accessible authentication minimum (3.3.8)
- Robust: parsing (4.1.1 — obsolete in 2.2), name/role/value (4.1.2), status messages (4.1.3)
- Document pass/fail per success criterion with severity assessment
- Assess against all WCAG 2.2 Level AA success criteria across four principles:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 83 lines · 18 tokens per session scan A f7bb484bec18
ada-wcag is a skill published in the GitHub repository bromso/metapowers (1 stars, last pushed 4mo ago), licensed MIT. It adds 18 tokens to every session and 1,449 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
chief-legal-and-risk-officer
Owns legal, contracts, intellectual property, regulatory compliance, privacy, security governance, enterprise risk, and audit readiness. Use this to review a contract or commitment, assess regulatory or privacy exposure, evaluate an IP or licensing question, judge the risk in a business decision, prepare for an audit…
chief-human-resources-officer
Owns the organization itself: org design, hiring, performance, compensation, development, culture, and employee relations. Use this to design or restructure a team, plan hiring, write a role or leveling definition, handle a performance or compensation question, diagnose why a team is underperforming for non-technical…
internal-controls-and-audit
Designs and tests controls over financial reporting — segregation of duties, approval limits, evidence, and preparing for audit. Use this to design controls for a process, prepare for an external audit, respond to an audit finding, set approval thresholds, or assess where a small team's segregation of duties is…
disputes-and-legal-holds
Handles a dispute from the first sign of it — recognizing when preservation obligations attach, issuing and scoping a legal hold, suspending automatic deletion across every system that holds relevant material, preserving privilege, managing outside counsel and cost, and evaluating settlement against the real cost of…
intellectual-property
Covers what the organization owns and what it is only borrowing — trademarks and clearance, copyright and work-for-hire, patents and trade secrets, open-source license obligations and copyleft reach, and IP terms in customer, contractor and AI-tool agreements. Use this to check whether a name is usable, establish that…
employment-compliance
Covers the employment rules that carry real penalties — exempt and non-exempt classification, overtime and hours, employee versus contractor status, work authorization and recordkeeping, accommodation requests, and the notices and retention obligations that go with them. Use this to classify a role, review a…