sitemap-valid
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external XML data, which constitutes a potential attack surface for indirect prompt injection.
- Ingestion points: The agent is instructed to fetch and process external XML sitemap files (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore instructions that might be embedded within the sitemap XML.
- Capability inventory: The skill's capabilities are limited to fetching web resources, performing XML validation, and providing code review feedback. It does not utilize dangerous subprocess calls or file-system write operations on the processed data.
- Sanitization: The skill does not explicitly describe sanitization or filtering of the fetched XML content.
- [SAFE]: The skill references standard developer tools and well-known services for SEO validation, such as Google Search Console and official sitemaps.org schemas. All external references target reputable documentation sites.
Audit Metadata