sitemap-generator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs network requests using the
requestslibrary to fetch content from external URLs during the site crawling phase. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external websites, which could be used to deliver indirect prompt injection attacks if an attacker controls a crawled page.
- Ingestion points: External HTML content is fetched and parsed within the
crawl_sitefunction inscripts/main.py. - Boundary markers: No delimiters or safety instructions are provided to help the agent distinguish between its instructions and the data retrieved from external sites.
- Capability inventory: The skill includes the ability to perform network GET requests, read local files (via the
from-urlscommand), and write XML files to the local filesystem. - Sanitization: While the script only extracts URL strings from HTML anchor tags, these strings are not sanitized for malicious instruction patterns before being displayed to the agent or saved to the output file.
Audit Metadata