seo-sitemap
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external XML sitemaps, which introduces a vulnerability surface where malicious instructions could be embedded in the processed data.
- Ingestion points: External XML sitemaps provided by users or fetched from live websites during analysis (Mode 1 in
SKILL.md). - Boundary markers: The instructions lack explicit delimiters or guidance for the agent to ignore instructions found within the XML content.
- Capability inventory: The agent is instructed to validate URLs (performing HTTP 200 checks), write reports (
VALIDATION-REPORT.md), and generate new XML files. - Sanitization: There are no instructions provided to sanitize, validate, or escape the content read from external sitemaps before it is processed by the agent.
Audit Metadata