xml-sitemap
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or high-risk command executions were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read project context and sitemap files which are untrusted external data. This creates a potential surface for indirect prompt injection, though the risk is low as the output is structured XML.
- [EXTERNAL_DOWNLOADS]: The instructions reference the use of '@astrojs/sitemap', which is a well-known package from a recognized framework provider.
Audit Metadata