Sitemap Generator
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill is a straightforward sitemap crawler that makes expected website requests and writes a sitemap file, with only normal caution needed around crawling permissions and dependency installation.
Before installing, use a virtual environment, install dependencies from trusted sources, and run the crawler only against websites you are authorized to crawl. Review the output path so it does not overwrite a file you care about.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running the skill will crawl the chosen site and may send many requests depending on the configured limits.
The script makes HTTP requests to the user-supplied crawl target. This is central to sitemap generation and is bounded by page, depth, timeout, and delay options, but it can still generate traffic to a website.
resp = requests.get(url, headers=headers, timeout=timeout, allow_redirects=True)
Use it only on domains you own or are authorized to audit, keep reasonable max-page/depth settings, and increase delay for larger sites.
Installing dependencies may pull current package versions from the configured Python package repository.
The documented setup uses third-party Python packages without pinned versions. These are common dependencies and expected for this crawler, but package provenance and version drift are user considerations.
pip install requests beautifulsoup4
Install dependencies in a trusted virtual environment and consider pinning or reviewing package versions if reproducibility matters.