umbraco-sitemap
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill performs intended CMS operations using standard APIs and follows security best practices.
- [INDIRECT_PROMPT_INJECTION]: The skill processes Umbraco content data to generate the sitemap.
- Ingestion points: Content is retrieved from the published cache via
DescendantsOrSelf()inSitemapController.csandxmlSitemap.cshtml. - Boundary markers: The output is structured XML adhering to the sitemaps.org schema.
- Capability inventory: The skill only generates string/XML output; it does not perform command execution, network requests, or file writes.
- Sanitization: Data is sanitized using
XElementfor C# logic and Razor's default encoding for templates. - [DYNAMIC_EXECUTION]: The skill uses
IPackagingServiceto deploy its schema and templates. This is a standard and expected mechanism for Umbraco extensions and is used safely here with local assets included in the skill package.
Audit Metadata