seo-sitemap
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONMETADATA_POISONING
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data by analyzing existing XML sitemaps and crawling website URLs, which could potentially contain malicious instructions.
- Ingestion points: Website URLs and XML sitemap files provided by the user or discovered via robots.txt as described in
SKILL.md. - Boundary markers: None specified in the skill instructions.
- Capability inventory: File system write access for report and sitemap generation, and network read access for URL validation.
- Sanitization: Not explicitly mentioned in the skill instructions, although the skill focuses on XML schema validation.
- [METADATA_POISONING]: The author name specified in the skill metadata (
AgriciDaniel) differs from the author account provided in the analysis context (flexksx). While this could be misleading, it appears to be a minor inconsistency without malicious intent in this context.
Audit Metadata