XML Sitemap Generator

Generate XML sitemaps by crawling a website or scanning local files. Auto-discovers pages via link extraction. Supports local HTML/MD file scanning with last...

This skill is internally coherent for generating sitemaps, but review before running: (1) The crawler disables TLS certificate verification — consider enabling verification to avoid MITM risks (remove or change the ssl context settings). (2) Running the skill will make outgoing HTTP(S) requests to any target you provide and will read any local files in the directory you point it at; only run it against sites and directories you trust, and consider running it in an isolated environment if you plan to crawl untrusted or internal network hosts. (3) If you plan to allow autonomous agent use, be aware it could be instructed to probe internal endpoints — restrict agent permissions or network access if that is a concern. If you want higher assurance, review the rest of the truncated main() logic or run the script locally on a test machine first.

Type: OpenClaw Skill Name: xml-sitemap-generator Version: 1.0.0 The sitemap generator in `scripts/sitemap_gen.py` contains a security vulnerability where it explicitly disables SSL certificate verification (`ssl.CERT_NONE`), making it susceptible to man-in-the-middle (MITM) attacks during web crawling. While the tool's local file scanning and network access are aligned with its stated purpose, the combination of broad filesystem access via `os.walk` and the insecure network configuration represents a high-risk profile. No evidence of intentional malicious behavior or data exfiltration was found.