seo-sitemap
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external XML sitemap data, representing a potential surface for instructions hidden within data.
- Ingestion points: Fetches and parses external
/sitemap.xmland related news, image, and video sitemap files. - Boundary markers: None defined; the instructions do not explicitly tell the agent to ignore instructions embedded in the sitemap content.
- Capability inventory: The skill executes
scripts/parse-sitemap.tsto process the ingested data. - Sanitization: No sanitization or schema validation rules for the XML content are defined in the skill markdown.
- [DYNAMIC_EXECUTION]: The skill relies on a local TypeScript script (
scripts/parse-sitemap.ts) to validate and parse sitemap structures.
Audit Metadata