wayfinder
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from an external issue tracker to guide agent actions and decision-making.
- Ingestion points: Retrieves content from a "map" issue and individual "decision tickets" stored on the project's issue tracker (e.g., GitHub Issues) to determine next steps.
- Boundary markers: While the skill uses Markdown structure (e.g.,
## Question,## Destination) to organize content, it lacks explicit defensive prompts to ignore instructions that may be embedded within the user-provided ticket descriptions. - Capability inventory: The skill can invoke several tools including
/pstack-swarmfor delegated task execution,/domain-modelingfor codebase edits, and/researchfor data gathering. - Sanitization: No validation or sanitization is performed on the data fetched from the issue tracker before it is processed by the model.
- [EXTERNAL_DOWNLOADS]: The skill documentation in
UPSTREAM.mdreferences themattpocock/skillsrepository on GitHub as its primary source and adaptation base.
Audit Metadata