xml-sitemap
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of technical guidelines and examples for sitemap configuration, complying with the sitemaps.org protocol. No malicious patterns or behaviors were detected.
- [DATA_EXPOSURE]: The skill instructions advise the agent to read local project configuration files (
.claude/project-context.md,.cursor/project-context.md) to obtain site metadata such as URL structure. This is an expected behavior for a developer-oriented skill facilitating sitemap automation. - [INDIRECT_PROMPT_INJECTION]: The skill consumes data from project context files which could be manipulated. However, the skill's capabilities are limited to producing text-based documentation and XML templates, which does not present a path for privilege escalation or remote execution. * Ingestion points: .claude/project-context.md, .cursor/project-context.md * Boundary markers: Not present * Capability inventory: File-read (context), code generation (XML) * Sanitization: Not present
Audit Metadata