site-architecture
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/sitemap_analyzer.pyscript utilizes the standardurllib.requestlibrary to fetch sitemap XML files from remote URLs. This is a primary intended function of the skill used for website auditing. - [COMMAND_EXECUTION]: The skill instructs the agent to run a local Python script,
scripts/sitemap_analyzer.py, to process sitemap data. The script uses only standard libraries and performs legitimate technical SEO evaluations. - [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection because it ingests and analyzes data from external sitemaps. 1. Ingestion points: External content is fetched from URLs in
scripts/sitemap_analyzer.py(line 330). 2. Boundary markers: Absent. No specialized delimiters or warnings are used to isolate the script's output. 3. Capability inventory: The skill can perform network requests and execute local scripts for data processing. 4. Sanitization: The script parses the XML structure usingxml.etree.ElementTreebut does not sanitize the text content of URL locations before agent review.
Audit Metadata