sitemap-generator

Warn

Audited by Snyk on Feb 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's scripts/main.py crawl_site function issues requests.get and parses fetched HTML with BeautifulSoup (and the from-urls command can ingest arbitrary URL lists), so it fetches and interprets open/public third‑party web content that could contain untrusted, user-generated data.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 13, 2026, 03:25 PM