seo-sitemaps
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local script (
parse-robots-sitemap.mjs) for verification tasks. This script is part of the vendor's own repository structure at${CLAUDE_SKILL_DIR}/../../scripts/and is used to perform technical validation of sitemaps and robots.txt files. - [PROMPT_INJECTION]: The skill processes untrusted external data (sitemaps and robots.txt from remote URLs), which represents a potential indirect prompt injection surface typical for web auditing tools.
- Ingestion points: Content is fetched from
/sitemap.xml,/robots.txt, and the website's rendered DOM. - Boundary markers: Absent; the skill does not explicitly define delimiters to separate untrusted data from the agent's internal instructions.
- Capability inventory: The skill uses
Bash,WebFetch, and local file system tools (Read,Grep,Glob). - Sanitization: Content is parsed against XML schemas for technical validity, but no specific security-focused sanitization of the text content is described.
Audit Metadata