seo-sitemap
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill ingests untrusted data from external XML sitemaps and robots.txt files, which creates a surface for indirect prompt injection attacks. A malicious sitemap could contain hidden instructions intended to override the agent's logic.
- Ingestion points: Content retrieved from user-provided URLs for sitemap and robots.txt analysis (SKILL.md).
- Boundary markers: Absent; no specific instructions or delimiters are used to isolate external content from the agent's primary instructions.
- Capability inventory: The skill performs network requests to validate URLs and writes analysis reports to the file system (SKILL.md).
- Sanitization: Absent; the skill does not mention any filtering or validation of the text content fetched from external sources.
- [EXTERNAL_DOWNLOADS]: The skill is designed to perform network requests to arbitrary external domains to fetch sitemaps and check the HTTP status codes of various URLs.
Audit Metadata