fix: at main in main.go

[orbisai0security]

Summary

Fix high severity security issue in main.go.

Vulnerability

Field	Value
ID	V-002
Severity	HIGH
Scanner	multi_agent_ai
Rule	V-002
File	main.go:244
CWE	CWE-22

Description: At main.go:244, the application calls os.Create(outSitemapFile) to create a sitemap output file. If outSitemapFile is derived from a command-line argument or configuration value without path sanitization (no filepath.Clean() or directory boundary check), an attacker who can influence this value could supply a path traversal payload (e.g., '../../etc/cron.d/malicious') to overwrite arbitrary files on the host filesystem. This is particularly dangerous in CI/CD environments where the application runs with elevated permissions.

Changes

• main.go
• pkg/markdown/convert.go

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security

[github-actions]

Automated Quality Checks

Skipped — this PR does not modify README.md, so package quality checks do not apply.

This is expected for maintenance, documentation, or workflow PRs.