geo-schema-gen
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill explicitly fetches and parses arbitrary public webpages/sitemaps (see scripts/generate_schema.py auto_generate which calls requests.get(url) and scripts/batch_generate.py which fetches a sitemap and requests.get each URL) and uses that untrusted page content to detect schema types and populate JSON-LD, so third-party content is read and can materially influence generation/decisions.
Audit Metadata