30x-seo-sitemap
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates a surface for indirect injection by fetching and analyzing external XML sitemaps from remote URLs provided by users.\n
- Ingestion points: External XML content retrieved via the WebFetch tool during the sitemap validation process.\n
- Boundary markers: No specific delimiters or boundary markers are defined to isolate untrusted sitemap content from the agent's instructions.\n
- Capability inventory: The skill has access to WebFetch (network requests) and Read (file system access) tools.\n
- Sanitization: There is no documented logic for sanitizing or escaping the content found within XML tags before processing.\n- [EXTERNAL_DOWNLOADS]: The skill identifies and fetches sitemap files from external domains as part of its analysis mode, which is the intended core functionality of the tool.
Audit Metadata