llms.txt File Builder

• Analyzed: May 11, 2026, 4:54 AM
• Findings: 1
• Version: 1.0.1
• Hash: 865bba2476aaa0628e580ac92aad6677bda4b108665ba4fda56031d2e7a140e6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The Python scripts (`scripts/generate_llms_txt.py` and `scripts/validate_llms_txt.py`) exhibit critical vulnerabilities. Both scripts perform network requests to user-controlled domains/URLs, creating a Server-Side Request Forgery (SSRF) risk. Additionally, `generate_llms_txt.py` allows writing to arbitrary file paths via the `--output` argument, and `validate_llms_txt.py` allows reading arbitrary file paths, posing arbitrary file write/read vulnerabilities. While the code's stated purpose is benign, these flaws could be exploited for data exfiltration, RCE, or privilege escalation, classifying the skill as suspicious due to severe security risks.