geo-schema-gen

Warn

Audited by Snyk on Mar 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). The skill explicitly fetches and parses arbitrary public webpages/sitemaps (see scripts/generate_schema.py auto_generate which calls requests.get(url) and scripts/batch_generate.py which fetches a sitemap and requests.get each URL) and uses that untrusted page content to detect schema types and populate JSON-LD, so third-party content is read and can materially influence generation/decisions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 5, 2026, 02:33 AM