wayfinder
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a structured workflow for tracking project progress through markdown files. No malicious behaviors such as data exfiltration, obfuscation, or unauthorized command execution were detected.
- [PROMPT_INJECTION]: The skill has a potential surface for indirect prompt injection because it reads and processes existing tickets which may contain untrusted content. This risk is considered low due to the planning-oriented nature of the skill and requirements for human-in-the-loop confirmation.
- Ingestion points: Processes ticket data from
docs/tickets/using theticket-parsetool as described inSKILL.md. - Boundary markers: No explicit markers are used to isolate parsed ticket content from the agent's internal instructions.
- Capability inventory: Includes the ability to write project specs (
to-spec), create tickets (to-tickets), and route tasks to execution tools (execute-ticket). - Sanitization: No specific content sanitization or validation of the content within processed tickets is documented.
Audit Metadata