building-static-site-rss-feeds
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Includes documentation and examples for using
curlto interact with the W3C Feed Validator, an established service for validating feed syntax. - [INDIRECT_PROMPT_INJECTION]: The skill outlines a methodology for converting markdown-based content into structured web feeds, creating an attack surface for indirect injection.
- Ingestion points: The implementation logic in
references/IMPLEMENTATION.mddescribes reading content from local files in thecontent/postsdirectory. - Boundary markers: The provided templates and logic do not specify the use of delimiters or instructions to prevent the agent from following directions embedded within the site's content.
- Capability inventory: The implementation requires capabilities for file system access (
os.WriteFile,os.Create) and web serving via HTTP. - Sanitization: The skill recommends using XML CDATA sections to escape HTML content and provides a programmatic validation step using
xml.Unmarshalto ensure well-formedness.
Audit Metadata